Examkin

Question

Difficulty: MediumHigh Availability and Disaster Recovery Design

A healthcare provider is designing a new patient portal system. The system's backend database must be PostgreSQL-compatible. The primary infrastructure will be hosted in us-east-1 with a disaster recovery (DR) site in us-west-2. The business requirements state a Recovery Time Objective (RTO) of 15 minutes and a Recovery Point Objective (RPO) of 5 minutes. The application requires outbound internet access to perform external verification of medical licenses. The architecture must remain highly available within the primary region, ensuring no single point of failure exists for outbound traffic. Which of the following configurations should the solutions architect choose to meet these requirements? (Select TWO.)

  1. Deploy an Amazon Aurora PostgreSQL Global Database with the primary cluster in us-east-1 and a secondary cluster in us-west-2, using Aurora global replication to maintain an RPO of less than 1 minute.Answer
  2. Deploy a NAT Gateway in each Availability Zone in the us-east-1 VPC, and configure the route tables of the private subnets in each Availability Zone to route outbound traffic through the local NAT Gateway in that same zone.Answer
  3. C
    Deploy an Amazon RDS for PostgreSQL Multi-AZ database in us-east-1, and configure the standby instance in the secondary Availability Zone to serve read traffic and perform cross-region disaster recovery.
  4. D
    Deploy a single NAT Gateway in one public subnet of the us-east-1 VPC, and configure the route tables of all private subnets across all Availability Zones to route outbound traffic through this NAT Gateway to minimize running costs.
  5. E
    Configure AWS Backup to take database snapshots every 6 hours, copy them to us-west-2, and write a script to restore them during failover.

Answer

Deploy an Amazon Aurora PostgreSQL Global Database with the primary cluster in us-east-1 and a secondary cluster in us-west-2, and deploy a NAT Gateway in each Availability Zone in the us-east-1 VPC.
The correct architecture uses Amazon Aurora Global Database to achieve cross-region physical replication with low latency, satisfying the 5-minute RPO and 15-minute RTO. Additionally, it deploys redundant NAT Gateways across all Availability Zones in the primary region's VPC, which removes any single point of failure for outbound internet traffic.

Step-by-Step Solution

1
Analyze the database RTO and RPO requirements.
Determine that the database replication strategy must support an RPO of under 5 minutes and an RTO of under 15 minutes across AWS Regions.
This eliminates slow backup-and-restore strategies and points to cross-region database replication like Aurora Global Database.
2
Analyze the high availability requirement for outbound traffic in the primary region.
Determine that a single NAT Gateway setup is insufficient because it creates a single point of failure.
To ensure high availability, NAT Gateways must be deployed in each Availability Zone where application workloads are running.
3
Select the combination of configurations that satisfies all requirements.
Choose Aurora Global Database for multi-region replication and Multi-AZ NAT Gateways for local outbound redundancy.
These two choices address the multi-region RTO/RPO goals and the local high availability constraints respectively.

Key Concept

Designing database replication and network infrastructure to meet target RTO/RPO and high availability constraints without introducing single points of failure.
Rate this question

Topics

High Availability and Disaster Recovery Design

More questions from this topic