Match each AWS management tool to its purpose.
Drag a concept onto its matching description — or click a concept then click the description.
Audit API calls and user activity
Monitoring and observability
Track resource configuration changes
Best practice recommendations
Infrastructure as code templates
Answer choices
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
AWS CloudFormation: Infrastructure as code to provision and manage AWS resources.
These management tools serve distinct purposes: CloudFormation for infrastructure provisioning, Config for configuration monitoring, and Trusted Advisor for optimization recommendations.
Answer analysis
For each option: why learners choose it and why it is or isn't the right answer here.
AWS CloudFormation: Infrastructure as code to provision and manage AWS resources.
Why this is correct
CloudFormation treats infrastructure as code by letting you declare AWS resources in JSON or YAML templates, then it orchestrates the creation, update, and deletion of the entire stack in a predictable, repeatable way. Change sets allow you to review how a change will affect resources before applying it, and automatic rollback can undo failed updates. This is what makes it the provisioning tool, not a monitoring service.
AWS CloudFormation: Continuously monitor and record AWS resource configurations.
Why it's wrong here
This purpose belongs to AWS Config, not CloudFormation. CloudFormation creates, updates, and deletes resources based on templates, but it does not continuously watch or record configuration changes across your account. AWS Config captures configuration history, detects changes, and evaluates compliance against rules — that is the tool designed for continuous resource configuration monitoring.
AWS Config: Assess, audit, and evaluate the configurations of your AWS resources.
Why this is correct
AWS Config gives you a detailed inventory of your AWS resources and records every state change over time. You define rules that express desired configurations, and AWS Config evaluates each resource against those rules, flagging noncompliant resources. It also provides configuration snapshots and streams change notifications via Amazon EventBridge, enabling governance and audit workflows.
AWS Config: Optimize resource usage and improve security by following best practices.
Why it's wrong here
This describes AWS Trusted Advisor, not AWS Config. Trusted Advisor runs automated checks against AWS best practices across cost optimization, security, fault tolerance, performance, and service limits, then recommends actions like idle resource identification or security group tightening. AWS Config, in contrast, measures resource configurations against your own defined rules and does not generate best-practice recommendations by itself.
AWS Trusted Advisor: Inspect your AWS environment and make recommendations for saving money and improving security.
Why this is correct
AWS Trusted Advisor inspects your AWS account and environment, running hundreds of checks against AWS best practices in categories like cost optimization, security, fault tolerance, performance, and service limits. It surfaces actionable recommendations, such as unused Amazon EC2 instances, underutilized RDS databases, open security group ports, and IAM keys that are too old. These insights help you reduce spend and improve your security posture without manual audits.
Go deeper
About these practice questions
Courseiva writes every CLF-C02 question from scratch — 988 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CLF-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CLF-C02 exam.