A security architect is designing a high-availability solution for a critical authentication service distributed across two geographically separated cloud availability zones. The solution must support dynamic redirection of client traffic during an outage and ensure zero data loss for active user sessions during a database failover. Which of the following technical controls should be included in the design to meet these resilience requirements? (Select TWO.)
- Synchronous data replication between database instances across both availability zonesAnswer
- Health probes combined with global server load balancing to dynamically reroute client requestsAnswer
- CRAID 6 disk arrays configured on host storage drives within each database server node
- DAutomated daily differential tape backups transferred to an offsite cold storage facility
Answer
Synchronous data replication across availability zones and health probes combined with global server load balancing.
High availability across separate availability zones requires both data synchronization and automated traffic routing. Synchronous replication ensures that data is committed across nodes simultaneously so no transaction state is lost during an unexpected failure. Integrated health probes and load balancing allow the system to continuously monitor endpoint health and reroute user traffic seamlessly to operational instances without human intervention.
Step-by-Step Solution
Key Concept
High Availability Infrastructure Controls and Fault Tolerance Mechanisms