A media company runs a video-on-demand platform on AWS. Video files (.mp4) and thumbnail images (.jpg) are stored in the same Amazon S3 bucket. The company uses Amazon CloudFront to deliver content to users globally. The video files are large and do not change frequently, so the company wants them to be cached at CloudFront edge locations for 30 days. Thumbnails change more often when new uploads are processed, so the company wants them to be cached for only 1 day. The company wants a single CloudFront distribution to serve both types of content from the same S3 bucket. Which configuration should the company use to meet these requirements with minimal operational overhead?

Create one CloudFront behavior for all content. Set a cache policy with a TTL of 30 days. Create a Lambda@Edge function to override the TTL to 1 day for requests with .jpg extension.

This adds unnecessary complexity and operational overhead by introducing Lambda@Edge when CloudFront natively supports different TTLs per behavior. Moreover, the cache policy applies at the behavior level, not per file extension within a single behavior, making this solution error-prone and harder to maintain.

Create two separate CloudFront distributions: one for videos with a cache policy of 30 days, and one for thumbnails with a cache policy of 1 day. Point both to the same S3 bucket.

Managing two separate distributions adds complexity and unnecessary costs. A single distribution with multiple behaviors is designed for exactly this use case. Using two distributions would require managing separate DNS records, SSL certificates, and other configuration.

In the S3 bucket, create two folders: /videos and /thumbnails. Use S3 Cross-Region Replication to replicate thumbnails to a separate bucket in a different Region. Create a single CloudFront behavior with a cache policy of 1 day for the thumbnail bucket and a separate behavior for the original bucket.

Cross-Region Replication is not needed for caching TTL control. This option introduces unnecessary data transfer costs and operational complexity. CloudFront can serve content from a single S3 bucket with different cache policies per behavior, making replication and multiple origins unnecessary.

What does this CLF-C02 question test?

Static NAT maps one inside address to one outside address.

What is the correct answer to this question?

The correct answer is: Create two CloudFront behaviors: one for the path pattern /videos/* and one for /thumbnails/*. Associate a cache policy with a TTL of 30 days to the video behavior and a cache policy with a TTL of 1 day to the thumbnail behavior. Both behaviors point to the same S3 origin. — Amazon CloudFront allows you to define multiple behaviors within a single distribution. Each behavior can be associated with a path pattern (e.g., /videos/*) and have its own cache policy (or TTL settings). This lets you serve different types of content from the same origin with different caching rules, without needing extra infrastructure like Lambda@Edge functions or separate distributions. Option B is the simplest and most cost-effective approach.

What should I do if I get this CLF-C02 question wrong?

Then try more questions from the same exam bank and focus on understanding why the wrong options are tempting.