Drag steps to the numbered slots on the right, or tap a step then tap a slot.
CLF-C02 Billing, Pricing, and Support Practice Question
Drag and drop the steps to set up CloudFront with an S3 origin in the correct order.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
1. Prepare the S3 bucket for static website hosting. 2. Create a CloudFront distribution. 3. Configure the origin settings to point to the S3 bucket. 4. Update DNS to point to the CloudFront distribution.
CloudFront with S3: prepare S3, create distribution, configure origin, and update DNS.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
1. Prepare the S3 bucket for static website hosting. 2. Create a CloudFront distribution. 3. Configure the origin settings to point to the S3 bucket. 4. Update DNS to point to the CloudFront distribution.
Why this is correct
This sequence is correct because the S3 bucket must first be enabled for static website hosting so it can serve as a valid origin with the proper endpoint and permissions. You then create the CloudFront distribution, during which you specify the S3 bucket as the origin and configure behaviors like caching and HTTPS. After the distribution is deployed and its domain name is known, you update DNS (e.g., a CNAME) to point your custom domain to the CloudFront distribution. Preparing the bucket first ensures the origin is resolvable, and configuring the origin as part of distribution creation is mandatory because the distribution cannot exist without an origin.
- ✗
1. Create a CloudFront distribution. 2. Prepare the S3 bucket for static website hosting. 3. Configure the origin settings to point to the S3 bucket. 4. Update DNS to point to the CloudFront distribution.
Why it's wrong here
This sequence is invalid because you attempt to create a CloudFront distribution before preparing the S3 bucket for static website hosting. While CloudFront can technically point to an S3 bucket that is not configured for static hosting, the intended workflow here requires the bucket to be ready first; more importantly, you cannot configure the origin settings meaningfully if the origin is not accessible or properly configured. Creating the distribution first would force you to supply a bucket endpoint that may not yet be set up as a website endpoint, leading to configuration errors or a distribution that fails to serve content. The origin configuration is an integral part of the distribution creation step, so initiating the distribution before the bucket is ready breaks the dependency order.
- ✗
1. Prepare the S3 bucket for static website hosting. 2. Configure the origin settings to point to the S3 bucket. 3. Create a CloudFront distribution. 4. Update DNS to point to the CloudFront distribution.
Why it's wrong here
This order incorrectly isolates origin configuration as a separate step before creating the CloudFront distribution. In the AWS Management Console, the origin is defined within the Create Distribution wizard—you cannot configure the origin settings independently and then attach them to a distribution later. The correct sequence is to prepare the bucket, then create the distribution, and while doing so specify the S3 bucket's website endpoint or REST endpoint as the origin. Attempting to configure the origin in advance is not possible because there is no standalone 'origin resource' that exists before the distribution; the origin settings are an attribute of the distribution itself.
- ✗
1. Update DNS to point to the CloudFront distribution. 2. Prepare the S3 bucket for static website hosting. 3. Create a CloudFront distribution. 4. Configure the origin settings to point to the S3 bucket.
Why it's wrong here
This ordering is fundamentally flawed because it attempts to update DNS before the CloudFront distribution exists or has a deployable domain name. DNS records (like CNAME or A records with CloudFront's domain) require the distribution's assigned domain name, which is only available after the distribution is created. Furthermore, the S3 bucket and origin configuration must be completed before any traffic can flow, so putting DNS first inverts the entire dependency chain. Even if the bucket were prepared later, the DNS record would point to a nonexistent distribution, causing resolution failures. The correct order always places DNS last because it relies on the fully created and configured distribution endpoint.
Quick reference
AWS S3 Storage Class Comparison
| Storage Class | Min Duration | Retrieval | Use Case |
|---|---|---|---|
| S3 Standard | None | Immediate | Frequently accessed data |
| S3 Standard-IA | 30 days | Immediate | Infrequent access, rapid retrieval |
| S3 One Zone-IA | 30 days | Immediate | Non-critical infrequent data |
| S3 Intelligent-Tiering | None | Immediate–hours | Unknown or changing access patterns |
| S3 Glacier Instant | 90 days | Milliseconds | Archive with instant retrieval |
| S3 Glacier Flexible | 90 days | Minutes–hours | Archive, flexible retrieval |
| S3 Glacier Deep Archive | 180 days | Hours | Long-term compliance archive |
Go deeper
Related to this question
About these practice questions
One of 988 original CLF-C02 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CLF-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CLF-C02 exam.