Examkin

Question

Difficulty: MediumHigh Availability and Disaster Recovery Design

A logistics company is designing a new fleet tracking application on AWS that must be deployed across two AWS Regions: eu-west-1 as primary and us-east-1 as secondary. The architecture must achieve a database Recovery Point Objective (RPO) of less than 1 minute and a Recovery Time Objective (RTO) of less than 10 minutes. The workloads in both VPCs require outbound internet access to track GPS coordinates from external devices. Outbound connectivity must be resilient to Availability Zone outages within each region. Additionally, internal microservices in both VPCs must be able to resolve private DNS records hosted in a centralized Amazon Route 53 Private Hosted Zone (PHZ).

Which two configuration options should the solutions architect select to meet these requirements?

  1. Configure an Amazon Aurora Global Database with the primary database cluster in eu-west-1 and a secondary database cluster in us-east-1 to handle replication and failover.Answer
  2. Associate the Route 53 Private Hosted Zone with the VPCs in both regions, and deploy a NAT Gateway in each Availability Zone within both VPCs to handle outbound traffic.Answer
  3. C
    Configure Amazon RDS Multi-AZ for PostgreSQL in eu-west-1, deploy a cross-region read replica in us-east-1, and direct local read traffic to the RDS standby instance in eu-west-1.
  4. D
    Deploy a single NAT Gateway in the primary Availability Zone of each region to route outbound traffic, and configure VPC peering to enable DNS resolution in the secondary VPC without host zone association.
  5. E
    Implement a pilot light strategy by configuring hourly snapshots of the database in eu-west-1, copying them to us-east-1, and restoring them to a new database cluster during failover.

Answer

Configure an Amazon Aurora Global Database with the primary database cluster in eu-west-1 and a secondary database cluster in us-east-1. Also, associate the Route 53 Private Hosted Zone with the VPCs in both regions, and deploy a NAT Gateway in each Availability Zone within both VPCs.
The correct options are configuring Amazon Aurora Global Database and associating the Route 53 Private Hosted Zone with both VPCs while deploying a NAT Gateway in each Availability Zone. Aurora Global Database matches the RPO of less than 1 minute and the RTO of less than 10 minutes. Associating the private hosted zone enables DNS resolution across regions, and AZ-specific NAT Gateways ensure resilient outbound connectivity.

Step-by-Step Solution

1
Select the database replication strategy.
Amazon Aurora Global Database is chosen because it replicates data with latency under 1 second (meeting the RPO of < 1 minute) and supports managed failover (meeting the RTO of < 10 minutes).
Traditional RDS snapshots or read replica promotion cannot guarantee RTO and RPO requirements reliably under 10 minutes without high complexity or data loss.
2
Configure internal DNS resolution across regions.
Associate the Amazon Route 53 Private Hosted Zone created in the primary VPC with the secondary VPC in us-east-1.
By default, Route 53 Private Hosted Zones are only accessible to associated VPCs. Cross-region VPCs must be explicitly associated with the zone to resolve its DNS records.
3
Configure NAT Gateway placement for high availability.
Deploy a NAT Gateway in each Availability Zone of the VPCs in both regions.
If a single NAT Gateway is deployed in one Availability Zone, an outage in that zone would disrupt outbound internet connectivity for workloads in other Availability Zones of the same VPC.

Key Concept

High Availability and Disaster Recovery Design
Rate this question

Topics

High Availability and Disaster Recovery Design

More questions from this topic