ExamPark
Course menuCLF-C02

Exams / CLF-C02 / Monitoring, logging and auditing / Question 1

CLF-C02 practice question: Monitoring, logging and auditing (1 of 2)

Security and Compliance A free question from our original CLF-C02 practice exam. Try it, then open the answer to see why each option is right or wrong.

Last verified against current AWS documentation ·How we write our questions

An operations team runs a web fleet of Amazon EC2 instances.

It wants an email sent to the on-call engineer whenever the average CPU use of an instance stays above 80% for ten minutes, without any change to the instances.

Which AWS service should the team use to watch this metric and send the alert?

Choose one answer.

  1. A. AWS CloudTrail, which records the API calls made in AWS accounts
  2. B. AWS Config, which records resource configuration changes and checks them against rules
  3. C. Amazon CloudWatch, with an alarm on the CPU metric that notifies an Amazon SNS topic
  4. D. AWS Trusted Advisor, which checks accounts against best-practice recommendations
Show the answer and explanation

Answer: C

  • A. Wrong: CloudTrail records API calls and account activity, which is useful for auditing who changed what. It does not track CPU utilization or send threshold-based alerts.
  • B. Wrong: AWS Config records configuration changes to resources and evaluates them against rules. It does not track a performance metric such as CPU use over time.
  • C. Right: Correct. CloudWatch collects metrics such as EC2 CPU utilization. A metric alarm watches the metric over a set number of periods and can send a notification to an SNS topic when the threshold is crossed. Learn more: Using Amazon CloudWatch alarms (opens in a new tab)
  • D. Wrong: Trusted Advisor checks accounts against best-practice recommendations, such as cost and security checks. It does not watch live CPU metrics or send alerts when they exceed a threshold.

Explanation

CloudWatch collects metrics such as EC2 CPU utilization, and its alarms watch a metric over a period and act when a threshold is crossed. An alarm can notify an SNS topic that emails the on-call engineer. CloudTrail, Config and Trusted Advisor provide other kinds of logging, configuration and guidance.

Study

Keep practicing

Answer questions with a score at the end, or practice just this topic with the explanation after each one. No sign-up needed.

Take the free CLF-C02 practice examPractice Monitoring, logging and auditingAll Monitoring, logging and auditing questions

Want more on Monitoring, logging and auditing? The 5 full-length practice sets have 10 more Monitoring, logging and auditing questions, 325 in all, none of them in the free exam. One payment of $14.99, no subscription. See the practice sets