Question 1,222 of 1,546
Monitoring, Logging, and RemediationeasyMultiple ChoiceObjective-mapped

SOA-C02 Monitoring, Logging, and Remediation Practice Question

This SOA-C02 practice question tests your understanding of monitoring, logging, and remediation. Match the stated requirement to the specific cloud service, access model, or configuration option — many options are valid in isolation but not for this scenario. After answering, compare your reasoning against the explanation and wrong-answer breakdown below. Once you have made your selection, read the full explanation to reinforce the concept and understand why each distractor is designed to mislead on exam day.

A SysOps administrator needs to monitor the CPU utilization of an Amazon EC2 instance and receive an alert if it exceeds 80% for 10 consecutive minutes. The instance is in a VPC with no Internet access. What is the MOST efficient way to meet these requirements?

Question 1easymultiple choice
Full question →

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Create a CloudWatch alarm on the CPUUtilization metric with a period of 5 minutes and an evaluation period of 2.

Option B is correct because a CloudWatch alarm with a period of 5 minutes and an evaluation period of 2 means the alarm evaluates two consecutive 5-minute data points, totaling 10 minutes. Since the EC2 instance is in a VPC with no Internet access, CloudWatch metrics are still reported via the CloudWatch service endpoint within the VPC (or via VPC endpoints), so no additional agent or script is needed. This is the most efficient approach as it uses native CloudWatch functionality without requiring any custom scripts or additional software.

Key principle: Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Use AWS Systems Manager to run a script on the instance that checks CPU and sends an SNS notification.

    Why it's wrong here

    This adds unnecessary complexity; CloudWatch alarms are simpler and built-in.

  • Create a CloudWatch alarm on the CPUUtilization metric with a period of 5 minutes and an evaluation period of 2.

    Why this is correct

    CloudWatch automatically collects CPUUtilization metrics for EC2 instances, so no agent is needed.

    Related concept

    Read the scenario before looking for a memorised answer.

  • Enable detailed monitoring on the EC2 instance and create a CloudWatch alarm on the CPUUtilization metric.

    Why it's wrong here

    Detailed monitoring is not required for a 5-minute period; basic monitoring provides 5-minute metrics.

  • Install the CloudWatch agent on the EC2 instance to collect CPU metrics and create a CloudWatch alarm.

    Why it's wrong here

    The CloudWatch agent is not required for basic CPU metrics; they are collected automatically.

Common exam traps

Common exam trap: answer the scenario, not the keyword

The trap here is that candidates often assume they need detailed monitoring or the CloudWatch agent to meet a specific time window, but the default 5-minute period with multiple evaluation periods can achieve the same result more efficiently and at lower cost.

Detailed technical explanation

How to think about this question

CloudWatch alarms evaluate metrics based on the number of evaluation periods (consecutive data points) and the period length. For a 10-minute window, using a 5-minute period with 2 evaluation periods is mathematically equivalent to a 10-minute period with 1 evaluation period, but the former provides more granularity and faster detection of sustained breaches. The CPUUtilization metric is automatically sent to CloudWatch from EC2 every 5 minutes by default (basic monitoring), so no additional configuration is needed; the alarm simply compares the metric value to the threshold over the specified evaluation periods.

KKey Concepts to Remember

  • Read the scenario before looking for a memorised answer.
  • Find the constraint that changes the correct option.
  • Eliminate answers that are true in general but not in this case.

TExam Day Tips

  • Watch for words such as best, first, most likely and least administrative effort.
  • Review why wrong options are wrong, not only why the correct option is correct.

Key takeaway

Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.

Real-world example

How this comes up in practice

A company's IT admin needs to give a contractor read-only access to production logs without sharing account credentials. Using role-based access control (RBAC) and temporary scoped permissions — not a permanent shared password — is the correct pattern. Questions like this test whether you can apply least-privilege access across cloud identity services.

What to study next

Got this wrong? Here's your next step.

Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.

Related practice questions

Related SOA-C02 practice-question pages

Use these pages to review the topic behind this question. This is how one missed question becomes focused revision.

Practice this exam

Start a free SOA-C02 practice session

Short sessions build daily habit. Longer sessions build exam-day stamina. Try a timed session to simulate real conditions.

FAQ

Questions learners often ask

What does this SOA-C02 question test?

Monitoring, Logging, and Remediation — This question tests Monitoring, Logging, and Remediation — Read the scenario before looking for a memorised answer..

What is the correct answer to this question?

The correct answer is: Create a CloudWatch alarm on the CPUUtilization metric with a period of 5 minutes and an evaluation period of 2. — Option B is correct because a CloudWatch alarm with a period of 5 minutes and an evaluation period of 2 means the alarm evaluates two consecutive 5-minute data points, totaling 10 minutes. Since the EC2 instance is in a VPC with no Internet access, CloudWatch metrics are still reported via the CloudWatch service endpoint within the VPC (or via VPC endpoints), so no additional agent or script is needed. This is the most efficient approach as it uses native CloudWatch functionality without requiring any custom scripts or additional software.

What should I do if I get this SOA-C02 question wrong?

Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.

What is the key concept behind this question?

Read the scenario before looking for a memorised answer.

About these practice questions

Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

Keep practising

More SOA-C02 practice questions

Last reviewed: Jun 24, 2026

Question Discussion

Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.

Loading comments…

Sign in to join the discussion.

This SOA-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SOA-C02 exam.