Examkin

Question

Difficulty: MediumHigh Availability and Disaster Recovery Design

A healthcare company is designing a new multi-region telehealth application on AWS. The application runs on Amazon EC2 instances inside private subnets in both the us-east-1 (primary) and us-west-2 (secondary) regions. The architecture requires a Recovery Time Objective (RTO) of 15 minutes and a Recovery Point Objective (RPO) of 1 minute. The EC2 instances must be able to securely download software updates from the internet. Additionally, internal microservices in both regions need to resolve private service endpoints using a shared Route 53 Private Hosted Zone (PHZ). Which combination of actions should the solutions architect take to meet these high availability and disaster recovery requirements? (Select TWO.)

  1. Deploy Amazon Aurora Global Database with the primary cluster in us-east-1 and a secondary cluster in us-west-2 to meet RPO and RTO targets, and use Route 53 Application Recovery Controller (Route 53 ARC) to manage routing failover.Answer
  2. Configure NAT Gateways in each Availability Zone where private EC2 instances are deployed, and associate the shared Route 53 Private Hosted Zone with the VPCs in both the us-east-1 and us-west-2 regions.Answer
  3. C
    Deploy a single NAT Gateway in the primary Availability Zone of each region to centralize outbound traffic, and route all private subnet traffic in both regions through this single gateway.
  4. D
    Create a Route 53 Private Hosted Zone in us-east-1, and configure a cross-Region VPC peering connection to route internal DNS resolution requests without associating the zone with the us-west-2 VPC.
  5. E
    Implement a Pilot Light disaster recovery strategy by backing up the database to Amazon S3 hourly, copying the snapshots to us-west-2, and restoring them during a disaster event.
  6. F
    Deploy an Amazon RDS DB instance in a Multi-AZ configuration, and configure the secondary standby instance to scale out and process read operations during peak traffic loads.

Answer

Deploy Amazon Aurora Global Database with the primary cluster in us-east-1 and a secondary cluster in us-west-2 using Route 53 ARC, and configure redundant NAT Gateways in each Availability Zone of both regions while associating the shared Private Hosted Zone with the VPCs in both regions.
Deploying Amazon Aurora Global Database provides sub-second cross-region replication lag, easily satisfying the 1-minute RPO target, while Route 53 Application Recovery Controller (Route 53 ARC) routing controls manage regional failovers within the 15-minute RTO. Additionally, placing a NAT Gateway in each Availability Zone ensures that an outage in one zone does not block internet access for other zones. Finally, associating the shared Route 53 Private Hosted Zone with both regional VPCs allows secure, cross-Region resolution of internal service endpoints.

Step-by-Step Solution

1
Address database replication and regional failover limits.
Amazon Aurora Global Database provides sub-second replication (RPO < 1 minute) and Route 53 ARC enables rapid recovery controls (RTO < 15 minutes).
Meets the critical RTO/RPO limits for disaster recovery.
2
Address private DNS resolution across regions.
Associate the shared Route 53 Private Hosted Zone with the VPCs in both us-east-1 and us-west-2.
Allows instances in both regions to query and resolve internal endpoints within the same domain space.
3
Ensure highly available outbound internet connectivity.
Deploy NAT Gateways in each Availability Zone across the subnets of both regions.
Eliminates a single point of failure in outbound traffic path during an Availability Zone outage.

Key Concept

Designing multi-region HA/DR systems with Aurora Global Database, redundant NAT Gateways per AZ, and cross-Region Route 53 Private Hosted Zone associations.
Rate this question

Topics

High Availability and Disaster Recovery Design

More questions from this topic