SOA-C02 Monitoring, Logging, and Remediation Practice Question
A company wants to receive an email notification when an EC2 instance's status check fails. What AWS service should be used?
⚠ Common exam trap
A common mix-up: candidates confuse AWS Config or CloudTrail with monitoring services, but only CloudWatch Alarms can directly monitor EC2 status check metrics and trigger notifications.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Amazon CloudWatch Alarm
Amazon CloudWatch Alarms can monitor EC2 instance status checks (both system and instance checks) and trigger an action, such as sending an email via Amazon SNS, when a status check fails. This is the correct service because it directly integrates with EC2 metrics and supports alarm-based notifications for status check failures.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
AWS CloudTrail
Why it's wrong here
AWS CloudTrail records API calls made on the EC2 account, capturing events such as RunInstances, TerminateInstances, or ModifyInstanceAttribute. It does not collect or report on the operational health of an instance, such as system status checks or instance status checks. Without these health metrics, CloudTrail cannot be used to trigger an email notification when a specific EC2 instance fails a status check, so it is incorrect for this scenario.
- ✓
Amazon CloudWatch Alarm
Why this is correct
Amazon CloudWatch Alarm continuously monitors the StatusCheckFailed, StatusCheckFailed_System, and StatusCheckFailed_Instance metrics that EC2 automatically publishes at one-minute frequency. When one of these alarm metrics crosses a configured threshold, the alarm transitions to ALARM state and publishes a message to an Amazon SNS topic, which can be configured to send an email notification. This directly satisfies the requirement to receive an email when an EC2 instance's health changes.
- ✗
AWS Config
Why it's wrong here
AWS Config is a service that evaluates your EC2 instance configurations against desired policies, such as instance type, AMI ID, or security group rules, and records configuration changes as configuration items. It is designed for compliance auditing and resource inventory, not for real-time health monitoring. While Config can detect drift from your expected configuration, it does not process EC2 status checks or emit alerts based on the instance's runtime operational state.
- ✗
AWS Trusted Advisor
Why it's wrong here
AWS Trusted Advisor inspects your entire AWS account and delivers recommendations across categories like cost optimization, security, fault tolerance, and performance limits. It offers alerts for certain best-practice checks, such as unused load balancers or open security groups, but it does not monitor individual EC2 status checks or provide a granular alarm for a single instance's health failure. Since it lacks the per-instance metric monitoring capability, it is not the appropriate tool to trigger an email on that instance's status check failure.
Go deeper
Related to this question
About these practice questions
Courseiva writes every SOA-C02 question from scratch — 1,169 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SOA-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SOA-C02 exam.