CLF-C02 Exam Dumps - Amazon Web Services AWS Certified Foundational Questions and Answers

Customers are responsible for configuring access to their Amazon S3 buckets and objects. An S3 bucket policy is a resource-based policy that defines which principals can perform specified actions on the bucket and its objects, subject to the complete AWS authorization process. Because the customer determines who should access its data, configuring bucket policies is a customer responsibility, making option C correct. AWS is responsible for operating and protecting the physical storage equipment, data center facilities, underlying networking infrastructure, operating systems, and service platform that run Amazon S3. AWS also patches and maintains the managed S3 platform. Those tasks are part of securityofthe cloud and are not performed by individual customers. Customers retain responsibility for their content, including data classification, access permissions, encryption choices, public-access settings, versioning, lifecycle policies, and other service configurations. AWS provides secure S3 capabilities, but customers must configure those capabilities according to their business and compliance requirements. The fundamental exam distinction is that AWS secures the infrastructure that provides S3, while customers secure their S3 data and control how that data can be accessed.

TheRehostmigration strategy, often referred to as “lift-and-shift,” involves moving applications to the cloud with minimal or no modifications. This approach is suitable when a company wants to migrate legacy workloads to AWS without altering them. Other strategies, such asRepurchase,Replatform, andRefactor, involve making changes to the application or adopting different services, which is not aligned with the requirement to avoid modifications.

AWS Storage Gateway Volume Gateway, specifically its cached-volume configuration, meets the stated hybrid-storage requirements. With cached volumes, the primary data is stored in Amazon S3 while frequently accessed data is retained locally in the gateway’s cache. On-premises application servers access the volumes through the iSCSI protocol, and the local cache provides low-latency access to the active working set. This design allows the company to move or extend storage into AWS without requiring every frequently used block to be retrieved across the network for each access. Therefore, option C is correct. AWS Database Migration Service migrates and replicates database data, but the question describes application storage data and persistent low-latency access rather than a database-engine migration. AWS Application Migration Service moves servers and applications to AWS and is not a hybrid block-storage caching service. AWS Direct Connect provides a dedicated network connection between an on-premises environment and AWS, but connectivity alone does not create local caching for frequently used data. The decisive phrases are “application data” and “low-latency access to frequently used data,” which align directly with Volume Gateway cached volumes.

Amazon RDS (Relational Database Service) supports SQL Server and other relational databases while handling administrative tasks such as backups, patching, monitoring, and scaling. This allows the company to migrate its SQL Server database without managing the infrastructure manually. Amazon EC2for SQL Server would require more administrative overhead, as the company would be responsible for the maintenance. Amazon DynamoDB and Aurora do not support SQL Server directly.

AWS Transit Gateway acts as a cloud router for connecting multiple VPCs and on-premises networks, simplifying network management by creating a hub-and-spoke model for routing traffic. Direct Connect provides a private connection to AWS but does not function as a central router. Amazon Connect is unrelated, and Route 53 is for DNS services, not VPC connectivity.