Examkin

Question

Difficulty: MediumAWS Global Infrastructure

A government agency is migrating its national census processing system to AWS. The agency is legally mandated to ensure that all census database records remain strictly within the country's geographic boundaries. Additionally, the system architecture must be designed to withstand the complete failure of an entire physical data center facility without any service interruption.

Which of the following deployment strategies best satisfies these requirements?

  1. Distributing the database instances across multiple Availability Zones within a single AWS Region located in the host country.Answer
  2. B
    Replicating the database across multiple AWS Regions to ensure physical separation of the backup data.
  3. C
    Caching the database content across multiple AWS Edge Locations to ensure high availability and low latency.
  4. D
    Configuring the database to run in a single AWS Local Zone while replicating logs to an AWS Outposts rack in another country.

Answer

Distributing the database instances across multiple Availability Zones within a single AWS Region located in the host country.
Distributing the database across multiple Availability Zones within a single AWS Region satisfies both constraints. Availability Zones are physically separated and isolated from one another within a Region, protecting the system from a localized physical disaster. By keeping the deployment within a single AWS Region inside the host country, the data residency requirement is strictly met.

Step-by-Step Solution

1
Identify the compliance and resilience requirements from the scenario.
The system needs to keep all data within the national borders (data residency) and survive a complete data center outage (high availability/disaster recovery).
Establishing clear constraints prevents selecting options that violate legal compliance or fail to provide redundant physical infrastructure.
2
Evaluate the options against the data residency constraint.
Using multiple AWS Regions or replicating logs to another country violates the residency mandate, while using a single Region inside the country maintains compliance.
AWS Regions are geographically isolated, and data replication does not occur across Regions unless explicitly configured by the customer.
3
Evaluate the remaining options against the high availability and physical disaster recovery constraint.
Availability Zones are physically distinct, isolated locations within a Region designed to withstand localized disasters. Using multiple Availability Zones provides high availability, whereas Edge Locations or a single Local Zone do not support multi-data-center database replication.
A single Region contains multiple Availability Zones, allowing the agency to build a highly available architecture without transferring data across country borders.

Key Concept

AWS Global Infrastructure design for high availability and compliance, specifically the difference between Regions and Availability Zones.
Estimated Time:1m 15s
Rate this question

Topics

AWS Global Infrastructure

More questions from this topic