CLF-C02 Cloud Technology and Services Practice Question
A company wants to create RESTful APIs that serve as the front door to their backend Lambda functions and EC2 services. They need features including API key management, throttling to protect backends from overload, and usage plan enforcement. Which AWS service provides this?
⚠ Common exam trap
Test-takers frequently confuse Amazon CloudFront's edge caching and origin shielding capabilities with API management features, mistakenly thinking CloudFront can handle API key validation and throttling, when in fact CloudFront lacks native API key management and usage plan enforcement.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Amazon API Gateway
Amazon API Gateway is a fully managed service that makes it easy for developers to create, publish, maintain, monitor, and secure RESTful APIs at any scale. It directly provides built-in API key management, throttling (rate limiting and burst limits), and usage plan enforcement to protect backend services like Lambda functions and EC2 instances from overload. These features are core to API Gateway's functionality, making it the correct choice for acting as the front door to the described backend resources.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Amazon CloudFront
Why it's wrong here
Amazon CloudFront is a content delivery network (CDN) that caches and delivers static and dynamic content from edge locations. While you can place it in front of API Gateway to accelerate requests and add edge-level protection, CloudFront itself does not create, publish, or manage APIs, and it lacks native API key management, usage plans, or throttling policies for backend APIs.
- ✗
AWS Direct Connect
Why it's wrong here
AWS Direct Connect provides a dedicated, private network connection from your on-premises data center to AWS, bypassing the public internet for lower latency and more consistent bandwidth. It is purely a connectivity service, with no capability to construct API definitions, handle API keys, or apply rate limiting to backend services, making it irrelevant to API lifecycle management.
- ✓
Amazon API Gateway
Why this is correct
Amazon API Gateway is a fully managed service that enables you to create, publish, maintain, monitor, and secure REST, HTTP, and WebSocket APIs at scale. It natively supports API key management, usage plans, throttling, quota limits, and request/response transformation, and it integrates directly with AWS Lambda, EC2, and other backends to act as the front door for your applications. These capabilities make it the correct choice for managing backend APIs.
- ✗
Amazon Route 53
Why it's wrong here
Amazon Route 53 is a highly available and scalable Domain Name System (DNS) web service that routes end-user requests to AWS resources by converting domain names to IP addresses. Although it can direct traffic to an API Gateway endpoint, it does not generate API definitions, enforce API keys, or implement throttling logic, so it serves a different infrastructure role.
Quick reference
Cloud Service Model Comparison
| Model | You Manage | Provider Manages | Examples |
|---|---|---|---|
| IaaS | OS, runtime, apps, data | Hardware, hypervisor, networking | EC2, Azure VMs, GCP Compute Engine |
| PaaS | Apps and data | OS, runtime, middleware, hardware | Elastic Beanstalk, Azure App Service |
| SaaS | Data and settings only | Everything else | Microsoft 365, Salesforce, Workday |
| FaaS / Serverless | Function code only | Infra, scaling, runtime | Lambda, Azure Functions, Cloud Run |
| CaaS | Containers and apps | Kubernetes, OS, hardware | EKS, AKS, GKE |
Go deeper
Related to this question
About these practice questions
Courseiva writes every CLF-C02 question from scratch — 988 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on CLF-C02
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. A company is building a serverless web application using AWS Lambda for compute. The application needs to expose RESTful API endpoints that allow users to perform CRUD operations on a database. The API must support authentication using API keys, throttle requests to prevent abuse, and validate incoming request payloads before they reach the Lambda functions. The company wants a fully managed service that handles these API management tasks and integrates directly with AWS Lambda. Which AWS service should the company use?
medium- A.Amazon CloudFront
- ✓ B.Amazon API Gateway
- C.Application Load Balancer
- D.AWS Step Functions
Why B: Amazon API Gateway is a fully managed service that handles RESTful API creation, authentication via API keys, request throttling to prevent abuse, and request payload validation before invoking AWS Lambda functions. It integrates natively with Lambda, making it the ideal choice for serverless web applications requiring CRUD operations with built-in API management.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CLF-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CLF-C02 exam.