The difficult scenario that I encountered was the difference between an SCP and an IAM Policy. There were also a question about a “Blackhole” status for NAT Gateway. These were actually covered in the Tutorials Dojo practice tests but I wasn’t able to spend more time, so my tip is to really give yourself ample time for your exam prep.
The list of AWS Services Comparison articles from the Tutorials Dojo website is also helpful for me to identify the MOST suitable service to use amongst the seemingly similar options:
Comparison of AWS Services