Examkin

Question

Difficulty: MediumResilience, High Availability, and Redundancy

An enterprise organization is designing a high-availability infrastructure for its edge network services across two geographically separate data centers. The design requires automatic traffic redirection to the healthy data center if a primary site suffers an outage, while minimizing client browser resolution caching during a failover event. Which of the following mechanisms should the security architect deploy to meet these resilience objectives? (Select TWO.)

  1. Global Server Load Balancing (GSLB) configured with short Time-to-Live (TTL) DNS record valuesAnswer
  2. Automated DNS health-check monitoring paired with dynamic failover routing policiesAnswer
  3. C
    RAID 10 disk array mirroring configured across the inter-site WAN link
  4. D
    Inline network taps paired with passive intrusion detection system (IDS) logging

Answer

The correct mechanisms are Global Server Load Balancing (GSLB) configured with short Time-to-Live (TTL) DNS record values, and automated DNS health-check monitoring paired with dynamic failover routing policies.
High-availability edge architecture across multiple data centers relies on Global Server Load Balancing (GSLB) to route traffic to active facilities. Configuring short Time-to-Live (TTL) values prevents client systems and resolvers from caching obsolete IP addresses. Automated health checks work alongside GSLB to detect site outages in real time and automatically re-route incoming connections to healthy infrastructure.

Step-by-Step Solution

1
Identify the primary requirement for geographic site failover and client caching prevention.
Determined that multi-site traffic routing and DNS cache control are required.
Geographically separate data centers require site-level load distribution and rapid record expiry so clients query healthy nodes promptly.
2
Evaluate high-availability network routing controls.
GSLB with short TTLs and continuous health checks dynamically redirect traffic away from failed sites without client resolution delays.
GSLB evaluates node health dynamically and short TTLs prevent clients from retaining stale IP addresses.
3
Differentiate storage fault tolerance and detective monitoring controls from network resilience controls.
Eliminated RAID 10 drive arrays and passive IDS network taps.
RAID handles local storage drive failures, not site failover; passive IDS monitors network packets without altering or redirecting traffic paths.

Key Concept

Geographic High Availability and Global Server Load Balancing
Rate this question

Topics

Resilience, High Availability, and Redundancy

More questions from this topic