A cloud security architect is designing a resilient infrastructure for a critical financial transaction service deployed across two geographically distant cloud regions. To satisfy business requirements, the architecture must achieve a Recovery Point Objective (RPO) of zero (zero data loss) and a Recovery Time Objective (RTO) of near-zero in the event of an entire regional failure. Which TWO of the following architectural mechanisms must be deployed together to meet these strict availability and resilience targets?
- Active-active multi-region application deployment utilizing synchronous database replication across regionsAnswer
- Global Server Load Balancing (GSLB) configured with real-time health monitoring and dynamic latency/failover routingAnswer
- CAutomated 15-minute point-in-time database snapshot replication to immutable cloud storage in the secondary region
- DA cold standby secondary environment programmed to automatically provision infrastructure templates upon primary region alert
Answer
The correct architecture requires combining an active-active multi-region deployment utilizing synchronous database replication with Global Server Load Balancing (GSLB) featuring real-time health monitoring.
Achieving RPO = 0 (zero data loss) requires synchronous replication so that every write operation is committed in real time across geographically distributed database nodes. Achieving RTO = near-zero requires an active-active deployment supported by Global Server Load Balancing (GSLB), which continuously probes service health and instantly reroutes ingress traffic away from an impaired region to the surviving active region.
Step-by-Step Solution
Key Concept
High Availability, Synchronous Replication, and Global Load Balancing