Exams / CLF-C02 / Monitoring, logging and auditing / Question 1
CLF-C02 practice question: Monitoring, logging and auditing (1 of 2)
Security and Compliance A free question from our original CLF-C02 practice exam. Try it, then open the answer to see why each option is right or wrong.
An operations team wants to be notified by email when the average CPU use of an Amazon EC2 instance stays above 80% for ten minutes. Which AWS service should it use?
Choose one answer.
- AA. AWS CloudTrail
- BB. AWS Config
- CC. Amazon CloudWatch
- DD. AWS Trusted Advisor
Show the answer and explanation
Answer: C
- A. Wrong: CloudTrail records API activity, such as who made a change. It does not watch performance metrics like CPU use.
- B. Wrong: AWS Config records and evaluates resource configuration. It does not alarm on performance metrics.
- C. Right: Correct. A CloudWatch alarm can watch the CPUUtilization metric against a threshold and send a notification through Amazon SNS.
- D. Wrong: Trusted Advisor runs best-practice checks across an account. It does not send real-time alerts on an instance's CPU use.
Explanation
Amazon CloudWatch collects metrics such as EC2 CPU utilisation. A CloudWatch alarm watches a metric, compares it with a threshold over a number of periods, and can then take actions such as sending an Amazon SNS notification or triggering EC2 Auto Scaling. CloudTrail answers 'who did what', while CloudWatch answers 'how is it performing'.
Study
Keep practising
Answer questions with a score at the end, or practise just this topic with the explanation after each one. No sign-up needed.