CLF-C02 Practice Question 124: Data Residency Control
AWS Certified Cloud Practitioner (CLF-C02) · Test 13 · question 4 of 10
A European company stores all of its customer data in the Europe (Frankfurt) Region. Its legal team asks whether AWS might move that data to another Region, for example in the United States, for AWS's own operational reasons. Which statement is correct?
Show answer and explanation
Answer:
Under the AWS data privacy commitments, the customer chooses the AWS Region or Regions where its content is stored. AWS states that it will not move or replicate customer content outside the chosen Regions, except as necessary to provide the services the customer initiated, or as necessary to comply with the law or a binding order of a governmental body. Customers control their content, including where it is stored, whether it is encrypted, and who can access it.
Option A is false. Durability comes from redundancy *within* a Region, for example across Availability Zones, and copying data to another Region happens only when the customer sets it up, such as with S3 Cross-Region Replication. Option B is also false, because AWS doesn't relocate customer content to balance capacity. Option C mixes up two separate controls: encryption protects the confidentiality of data, while *location* is decided by the Region the customer chooses, whether or not the data is encrypted.
Reference: Data Privacy FAQ