SOA-C02 Monitoring, Logging, and Remediation Practice Question
A SysOps administrator wants to be alerted when an EC2 instance's status check fails. The instance is part of an Auto Scaling group. What is the BEST approach?
⚠ Common exam trap
It's easy for candidates to confuse CloudTrail (API logging) with CloudWatch (metrics and alarms), or assume EventBridge is the best choice for all event-driven monitoring, when in fact CloudWatch alarms on the native 'StatusCheckFailed' metric are the simplest and most direct solution for status check alerts.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Create a CloudWatch alarm on the 'StatusCheckFailed' metric.
The 'StatusCheckFailed' metric is automatically published by EC2 to CloudWatch, and a CloudWatch alarm on this metric can directly trigger an SNS notification or other action when the status check fails. This is the simplest and most reliable method for alerting on instance health, regardless of whether the instance is in an Auto Scaling group.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Use Amazon EventBridge to detect status check failures.
Why it's wrong here
EventBridge can detect EC2 status check failures, but it lacks the ability to correlate those failures with the Auto Scaling group’s lifecycle actions, such as instance replacement or termination. The correct approach must trigger an alert specifically when a status check failure occurs on an instance managed by the Auto Scaling group, which requires a CloudWatch alarm on the `StatusCheckFailed` metric with an Auto Scaling group dimension. EventBridge is tempting because it can capture AWS Health events and API calls, and would be correct for alerting on account-level service health issues or manual instance state changes.
- ✓
Create a CloudWatch alarm on the 'StatusCheckFailed' metric.
Why this is correct
A CloudWatch alarm on the StatusCheckFailed metric is the direct and accurate way to detect EC2 health issues because this metric aggregates both the system status check (for underlying hardware/network problems) and the instance status check (for OS/application-level issues). When the alarm enters ALARM state, it can trigger an SNS notification. This metric is available natively for every EC2 instance without extra configuration. Unlike event-driven logs or lifecycle hooks, it specifically measures the instance's operational health, making it the appropriate alert mechanism.
- ✗
Enable CloudTrail to monitor EC2 instance status changes.
Why it's wrong here
CloudTrail records API activity, such as who launched, stopped, or modified an instance, and is intended for auditing and governance. It does not provide continuous health data or status check metrics, and it only logs discrete actions rather than ongoing operational state. Therefore, enabling CloudTrail would not alert you to an instance's failed status check, as status failures are internal EC2 health events, not API calls.
- ✗
Configure an Auto Scaling lifecycle hook to send a notification.
Why it's wrong here
Auto Scaling lifecycle hooks are configured to pause instances during launch or termination transitions, allowing you to perform custom actions before the instance moves to the next state. They do not monitor ongoing instance health and cannot detect a status check failure after the instance is fully running. The notification they send is only for lifecycle state changes, not for operational status alerts, so this option would not satisfy the requirement to be alerted on a failed status check.
Go deeper
Related to this question
About these practice questions
One of 1,169 original SOA-C02 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SOA-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SOA-C02 exam.