CLF-C02 Security and compliance

A security team wants to centralize operating-system and application logs for searching and alerting. Which service should it use?

Show answer and explanation

Answer: B

Amazon CloudWatch Logs is the central aggregation point for OS and application logs: CloudWatch agents and various AWS services ship into one searchable store where metric filters can raise alarms on matching patterns.

Artifact holds compliance documents, the Pricing Calculator estimates costs, and Route 53 resolves DNS queries; none of these collect or analyze workload logs.

Why the other options are wrong

  • A. Artifact provides compliance reports and agreements; it ingests no logs.
  • C. The Pricing Calculator estimates the cost of architectures and takes no part in logging.
  • D. Route 53 is a DNS service; it records DNS query logs at most, not OS or application logs.

Keep going. 199 CLF-C02 questions, answers explained after each one.

Practise security and compliance

Reviewed November 2026. Spotted a problem with this question? Report it from the practice tool.