CLF-C02 Cloud Technology and Services Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✗

  AWS CloudTrail

  Why it's wrong here

  AWS CloudTrail is an auditing service that records API calls and management events made by users, roles, or AWS services, capturing details like the caller’s identity, source IP address, request parameters, and response elements. It helps answer questions about who did what and when for security analysis and compliance, but it does not collect numeric performance metrics from EC2 instances. CPU utilization is a telemetry signal generated by the instance’s operating system and hypervisor, not an API action, so CloudTrail has no data stream or alarm mechanism for it. Thus, CloudTrail is for auditing activity, not for real-time threshold-based alerts.

• ✗

  AWS Config

  Why it's wrong here

  AWS Config is a governance and compliance service that records the configuration state of AWS resources over time, such as security group rules, instance types, and EBS volume attachments, and evaluates that state against managed or custom rules. It detects configuration drift and can trigger remediation actions, but it does not collect transient performance metrics like CPU utilization because those exist as a stream of time-varying values rather than a discreet configuration item. CPU utilization is not part of a resource’s configuration JSON; it is a runtime metric captured by the hypervisor or OS. As a result, Config cannot create alarms for high CPU usage.

• ✓

  Amazon CloudWatch

  Why this is correct

  Amazon CloudWatch is AWS’s native monitoring service that collects and stores EC2 CPU utilization metrics as data points, either at the default 5-minute basic monitoring interval or at 1-minute intervals with detailed monitoring. You can configure an alarm specifying a threshold, such as CPUUtilization above 80%, along with a number of consecutive evaluation periods to determine when the alarm fires. When an alarm enters the ALARM state, it can trigger an action like publishing to an Amazon SNS topic to send email or SMS notifications. This direct metric collection, threshold evaluation, and notification pipeline is exactly what is needed to monitor CPU utilization.

• ✗

  AWS X-Ray

  Why it's wrong here

  AWS X-Ray is an application performance management tool that traces service requests end-to-end across distributed applications, capturing trace segments, subsegments, and annotations to analyze latency bottlenecks and errors at the code and service level. It visualizes the path of an HTTP request through services like API Gateway and Lambda, but it does not ingest low-level infrastructure metrics such as EC2 CPU utilization. X-Ray’s data model revolves around traces and spans, not time-series utilization metrics, and it has no built-in alarm for instance-level CPU thresholds. Monitoring CPU requires CloudWatch, which X-Ray cannot replace.

Go deeper

Related to this question