Design Resilient Architectures

382 soru

Soru 181Soru

An application is running on a single-node Amazon RDS for PostgreSQL DB instance. The database requires high availability with automatic failover in the event of an Availability Zone outage. Additionally, the application requires read performance scaling. Which TWO configurations or features should a solutions architect implement to meet these requirements? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Enable Multi-AZ deployment for the Amazon RDS DB instance; Create one or more RDS Read Replicas in different Availability Zones

Cevap

Enabling Multi-AZ deployment for the Amazon RDS DB instance and creating one or more RDS Read Replicas in different Availability Zones.
To achieve high availability and automatic failover for an Amazon RDS database, a Multi-AZ deployment must be configured because it automatically replicates data synchronously to a standby instance in another Availability Zone. To scale read queries and performance, deploying RDS Read Replicas is the appropriate solution because it allows read operations to be offloaded from the primary write instance.

Adım Adım Çözüm

1
Address the high availability and automatic failover requirement within the region.
Enable RDS Multi-AZ deployment.
RDS Multi-AZ replication is synchronous and automatically fails over to the standby replica in another Availability Zone if the primary zone fails.
2
Address the read performance scaling requirement.
Create RDS Read Replicas.
RDS Read Replicas offload read operations from the primary DB instance, allowing read scaling.

Anahtar Kavram

RDS Multi-AZ is used for high availability and automatic failover, whereas Read Replicas are used to scale read traffic.
Soru 182Soru

A media streaming company is designing a global application and needs to store user profiles in Amazon DynamoDB. The application must run in an active-active configuration across two AWS Regions: us-east-1 and us-west-2. The database configuration must support local read and write operations in both Regions, maintain replica synchronization with a Recovery Point Objective (RPO) of less than 1 second, and provide a Recovery Time Objective (RTO) of near zero. Which database configuration should a solutions architect recommend to meet these requirements?

Cevabı ve açıklamayı göster

Cevap: Create an Amazon DynamoDB global table replica in both us-east-1 and us-west-2.

Cevap

Create an Amazon DynamoDB global table replica in both us-east-1 and us-west-2.
Creating an Amazon DynamoDB global table replica in both target regions provides a fully managed, active-active multi-region configuration. It automatically replicates changes across regions, delivering local read and write performance with near-zero RTO and an RPO of under one second.

Adım Adım Çözüm

1
Identify the primary architectural requirements.
The requirements are multi-region active-active writes, sub-second RPO, and near-zero RTO.
This establishes the constraints needed to select the correct database configuration.
2
Evaluate the capabilities of Amazon DynamoDB Global Tables.
DynamoDB Global Tables are designed for active-active multi-region configurations, providing automatic bi-directional replication with sub-second latency.
This matches all stated RPO, RTO, and active-active constraints out of the box.
3
Verify if the distractors meet the constraints.
GSIs are single-region only; custom Lambda stream replication is prone to high latency and replication loops; backup strategies fail the sub-second RPO requirement.
This eliminates the incorrect configurations.

Anahtar Kavram

DynamoDB Global Tables for Multi-Region Active-Active High Availability
Tahmini Süre:1m 30s
Soru 183Soru

A logistics company needs to archive historical delivery route logs. The logs must be stored with high durability across multiple Availability Zones. In the event of an audit, the company must be able to retrieve any archived log file within 10 minutes to satisfy their SLA. Which two storage configurations will meet these requirements? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Amazon S3 Standard-Infrequent Access (S3 Standard-IA); Amazon S3 Glacier Instant Retrieval

Cevap

The correct configurations are Amazon S3 Standard-Infrequent Access (S3 Standard-IA) and Amazon S3 Glacier Instant Retrieval.
Amazon S3 Standard-Infrequent Access (S3 Standard-IA) and Amazon S3 Glacier Instant Retrieval are the correct choices. Both storage classes replicate data across at least three Availability Zones, ensuring high availability and resilience. Furthermore, both offer millisecond-level access, ensuring that archived logs can be retrieved well within the 10-minute SLA constraint.

Adım Adım Çözüm

1
Analyze the Availability Zone resilience requirement.
The storage solution must replicate data across multiple Availability Zones, which rules out single-AZ options.
This filters out configurations that are bound to a single Availability Zone, such as Amazon EBS volumes.
2
Evaluate the retrieval time constraints (Recovery Time Objective).
The target retrieval time must be under 10 minutes.
This filters out standard archive classes with long retrieval delays, such as Amazon S3 Glacier Flexible Retrieval with Standard retrieval (3-5 hours) or Amazon S3 Glacier Deep Archive (12 hours).
3
Select the configurations that support both multi-AZ replication and rapid retrieval.
Amazon S3 Standard-IA and Amazon S3 Glacier Instant Retrieval meet all constraints.
Both storage classes offer active, millisecond-level retrievals while storing data redundantly across three or more Availability Zones.

Anahtar Kavram

Selecting high-durability, multi-AZ AWS storage solutions that align with specific low RTO retrieval requirements.
Soru 184Soru

An enterprise application uses an Amazon RDS for PostgreSQL database to manage critical transactions. The architecture must guarantee high availability (HA) within the primary Region (uswest2us-west-2) with a Recovery Time Objective (RTO) of less than 6060 seconds and a Recovery Point Objective (RPO) of 00. For disaster recovery (DR) in a secondary Region (useast1us-east-1), the architecture must support a Recovery Point Objective (RPO) of less than 1515 minutes. The secondary Region must also support read scaling for local analytics workloads. Which of the following database configurations meets these requirements with the least operational complexity?

Cevabı ve açıklamayı göster

Cevap: Configure the database as an Amazon RDS Multi-AZ DB cluster deployment in the primary Region. Create a cross-region read replica in the secondary Region to serve local analytics workloads.

Cevap

Configure the database as an Amazon RDS Multi-AZ DB cluster deployment in the primary Region, and create a cross-region read replica in the secondary Region to serve local analytics workloads.
The correct configuration utilizes an Amazon RDS Multi-AZ DB cluster deployment in the primary Region. Multi-AZ DB clusters provide high availability with a writer DB instance and two readable reader DB instances across three Availability Zones. Failovers in this configuration typically take less than 3535 seconds, which satisfies the RTO of less than 6060 seconds, and the replication is synchronous, guaranteeing an RPO of 00. A cross-region read replica in the secondary Region provides asynchronous replication to meet the DR RPO requirement of less than 1515 minutes and allows local analytics workloads to perform read operations without impacting the primary writer.

Adım Adım Çözüm

1
Analyze high availability (HA) requirements for the primary database tier.
The requirement for an RPO of 00 means replication within the primary Region must be synchronous. The requirement for an RTO of less than 6060 seconds points to an RDS Multi-AZ cluster deployment, which typically fails over in less than 3535 seconds, compared to a standard Multi-AZ instance which can take 6060-120120 seconds.
This rules out single-AZ deployments utilizing asynchronous read replicas for HA.
2
Evaluate disaster recovery (DR) and read scaling constraints in the secondary Region.
The database must support an RPO of less than 1515 minutes in the secondary Region and allow read scaling for analytics.
Creating a cross-region read replica satisfies both constraints because replication is continuous (typically sub-minute lag, well under the 1515-minute RPO limit) and the replica can serve local read queries directly.
3
Assess failover and routing mechanisms.
Confirm that database write failovers across regions are not handled by passive read replicas directly, and that Route 53 Latency routing without health checks is insufficient.
This guarantees that the design relies on the native automated failover capabilities of the Multi-AZ DB cluster for local outages, and standard read replica promotion procedures for disaster recovery.

Anahtar Kavram

High Availability vs. Disaster Recovery in Amazon RDS
Soru 185Soru

A software development company hosts a collaborative code repository application on Amazon EC2 instances deployed across two Availability Zones. The application requires a shared file system that is POSIX-compliant. The file system must dynamically scale to support large code repositories, provide consistent low latencies for active files, and replicate data across multiple Availability Zones to ensure high availability. Which two actions should a solutions architect take to meet these requirements? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Create an Amazon Elastic File System (Amazon EFS) file system using the Regional (Standard) storage class.; Mount the Amazon EFS file system on the EC2 instances using the EFS mount helper and mount targets created in the subnets of each Availability Zone.

Cevap

Create an Amazon Elastic File System (Amazon EFS) file system using the Regional (Standard) storage class, and mount the file system on the EC2 instances using the EFS mount helper and mount targets created in the subnets of each Availability Zone.
The correct configuration combines Amazon EFS Regional storage class with mount targets in each Availability Zone. The Regional storage class automatically replicates data across multiple Availability Zones, ensuring high resilience and availability. Mount targets in each AZ subnet allow EC2 instances in different AZs to mount the file system concurrently over the network using standard NFS/POSIX protocols.

Adım Adım Çözüm

1
Identify the storage requirements of the application.
The application requires a POSIX-compliant shared file system that dynamically scales and is accessible concurrently across multiple Availability Zones with high availability.
This rules out block storage solutions like EBS, which are typically restricted to a single instance or single AZ, and points towards Amazon EFS.
2
Select the appropriate Amazon EFS storage class.
Choose the EFS Regional (Standard) storage class.
Regional storage classes replicate data across multiple Availability Zones to protect against AZ failure, whereas One Zone storage classes restrict data to a single AZ.
3
Configure client access to the file system across AZs.
Create EFS mount targets in the subnets of each Availability Zone and mount them on the EC2 instances.
This allows instances in both Availability Zones to connect to the shared EFS file system concurrently.

Anahtar Kavram

Amazon Elastic File System (EFS) provides highly available, durable, and POSIX-compliant shared file storage across multiple Availability Zones.
Soru 186Soru

A retail company is launching a new online inventory tracking application. The application will use an Amazon RDS for MySQL database. The database must be highly available and support automatic failover to a standby instance in another Availability Zone within the same Region in the event of an outage. Which database configuration should the solutions architect choose to meet these requirements?

Cevabı ve açıklamayı göster

Cevap: Configure the Amazon RDS DB instance as a Multi-AZ deployment.

Cevap

Configure the Amazon RDS DB instance as a Multi-AZ deployment.
Configuring the Amazon RDS DB instance as a Multi-AZ deployment is correct because it automatically provisions and maintains a synchronous standby replica in a different Availability Zone. If the primary instance fails, AWS automatically switches to the standby replica, providing high availability and automatic failover with minimal disruption and no manual intervention.

Adım Adım Çözüm

1
Analyze the requirements for high availability and automatic failover within the same AWS Region with minimal administrative effort.
Identify that the solution must provide synchronous replication and automated failover capabilities without requiring manual promotion or custom failover scripts.
This establishes the baseline criteria for evaluating AWS database configurations.
2
Evaluate Amazon RDS Multi-AZ deployments against the requirements.
Confirm that Multi-AZ deployments provide automatic failover to a synchronous standby instance in a different Availability Zone during an outage.
This configuration directly satisfies the high availability and automatic failover requirements with zero administrative overhead.
3
Assess alternative options like read replicas and Route 53 routing.
Determine that read replicas require manual intervention to promote them to primary, and Route 53 routing policies cannot perform database-level failovers.
This eliminates incorrect configurations that fail to provide automatic failover.

Anahtar Kavram

Amazon RDS Multi-AZ deployments provide high availability and automatic failover by synchronously replicating data to a standby instance in a different Availability Zone.
Soru 187Soru

A healthcare software provider is deploying a patient management portal on AWS. The relational database backend must remain highly available even if an entire Availability Zone (AZ) suffers an outage. The database configuration must support a Recovery Point Objective (RPO\text{RPO}) of 00 (zero data loss) and a Recovery Time Objective (RTO\text{RTO}) of less than 3535 seconds. Furthermore, the portal experiences frequent read-heavy spikes, requiring the ability to serve read queries directly from standby database nodes within the cluster to optimize performance. Which database architecture should a solutions architect recommend to meet these requirements?

Cevabı ve açıklamayı göster

Cevap: Deploy an Amazon RDS Multi-AZ DB cluster with one primary writer instance and two readable standby instances across three Availability Zones.

Cevap

Deploying an Amazon RDS Multi-AZ DB cluster with one primary writer instance and two readable standby instances across three Availability Zones is the correct configuration.
Deploying an Amazon RDS Multi-AZ DB cluster provides synchronous replication across three Availability Zones (ensuring RPO = 0) and automated failover that typically completes in under 35 seconds (meeting the RTO requirement). Crucially, unlike standard Multi-AZ DB instance deployments, the standby instances in a Multi-AZ DB cluster are readable, allowing the application to offload read traffic directly to them.

Adım Adım Çözüm

1
Evaluate the Recovery Point Objective (RPO) requirement.
To achieve an RPO of 0 (zero data loss), the database must use synchronous replication across Availability Zones.
Asynchronous replication mechanisms, such as standard RDS Read Replicas, can lead to data loss during failover.
2
Evaluate the Recovery Time Objective (RTO) and read-scaling requirements.
The database must support automatic failover in under 35 seconds and allow read queries to be served from standby nodes.
Standard Multi-AZ DB instance deployments do not support read queries on the standby instance. Multi-AZ DB clusters provide both automatic failover (typically under 35 seconds) and readable standby instances.
3
Select the configuration that satisfies all conditions.
An Amazon RDS Multi-AZ DB cluster meets all RPO, RTO, and read-scaling requirements.
It deploys one writer and two readable standby DB instances across three AZs with synchronous replication and automated failover.

Anahtar Kavram

Amazon RDS Multi-AZ DB clusters provide synchronous replication, fast automated failover, and active readable standby instances for scaling read traffic.
Tahmini Süre:1m 30s
Soru 188Soru

An online education platform hosts its web application on Amazon EC2 instances distributed across multiple Availability Zones. The platform requires a resilient storage architecture that includes a shared file system for active course media files which must be concurrently accessible by all EC2 instances. Additionally, database backups must be stored with high durability, ensuring a Recovery Time Objective (RTO) of 55 minutes and a Recovery Point Objective (RPO) of 2424 hours. Which two storage configurations should a solutions architect recommend to meet these requirements?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Use Amazon Elastic File System (Amazon EFS) to provide a shared, regional file system for the active course media files.; Store the database backups in Amazon S3 Standard to ensure high availability and immediate data retrieval.

Cevap

Use Amazon Elastic File System (Amazon EFS) for the shared file system, and store the database backups in Amazon S3 Standard.
The correct configurations are using Amazon EFS for shared multi-AZ storage and Amazon S3 Standard for backup storage. Amazon EFS is a regional service that supports concurrent read and write access from EC2 instances in multiple Availability Zones. Amazon S3 Standard provides active storage with immediate (millisecond-level) access, which easily satisfies the 5-minute Recovery Time Objective (RTO) for restoring backups.

Adım Adım Çözüm

1
Identify the access requirement for the active media files.
Multiple EC2 instances in different Availability Zones require concurrent read/write access to a single file system.
Amazon EFS is selected because it is a shared, regional file system designed for concurrent access across multiple AZs.
2
Evaluate the backup recovery metrics (RTO).
The RTO is 5 minutes, which requires immediate, low-latency retrieval of backup files.
Amazon S3 Standard is selected because it provides active storage with millisecond-level retrieval, satisfying the 5-minute RTO.

Anahtar Kavram

Selecting highly available, multi-AZ shared storage (Amazon EFS) and low-latency backup storage (Amazon S3 Standard) to meet specific application access and RTO requirements.
Tahmini Süre:1m 30s
Soru 189Soru

A financial services company hosts a global web application across multiple AWS Regions. The primary infrastructure is in the us-east-1 Region, containing an Application Load Balancer (ALB) and an Auto Scaling group of EC2 instances. To meet strict recovery time objective (RTO) requirements, the company deploys a replica of the environment in the eu-central-1 Region as a standby. The application serves a mix of cacheable static assets and highly dynamic, non-cacheable transactional API endpoints under /api/*. The architecture must ensure minimal latency, immediate failover to the standby region during an outage without relying on client-side DNS caching, and full support for all HTTP write methods (POST, PUT, DELETE) on the transactional endpoints. Which solution should a solutions architect recommend to meet these requirements with the least operational complexity?

Cevabı ve açıklamayı göster

Cevap: Create an Amazon CloudFront distribution and define an Origin Group with the us-east-1 ALB as the primary origin and the eu-central-1 ALB as the secondary origin. Configure origin failover with 500, 502, 503, and 504 status codes. Create two cache behaviors: a default behavior for static assets with caching enabled, and a behavior for the /api/* path with caching disabled by setting the Minimum, Maximum, and Default TTLs to 0, forwarding all headers, cookies, and query strings, and allowing all HTTP methods.

Cevap

Create an Amazon CloudFront distribution and define an Origin Group with the us-east-1 ALB as the primary origin and the eu-central-1 ALB as the secondary origin. Configure origin failover with 500, 502, 503, and 504 status codes. Create two cache behaviors: a default behavior for static assets with caching enabled, and a behavior for the /api/* path with caching disabled by setting the Minimum, Maximum, and Default TTLs to 0, forwarding all headers, cookies, and query strings, and allowing all HTTP methods.
The correct solution utilizes Amazon CloudFront Origin Groups, which natively handle regional failover at the edge. When the primary origin returns any of the configured 5xx errors, CloudFront transparently retries the request against the secondary origin without involving client-side DNS updates. By defining two cache behaviors, the static assets remain cached for performance, while the dynamic path (/api/*) is configured with TTLs of 0 and forwards all headers, cookies, and query strings, ensuring that transactional requests are dynamically routed to the active origin and support all HTTP write operations.

Adım Adım Çözüm

1
Configure the CloudFront Origin Group.
An Origin Group is defined with the primary load balancer in us-east-1 and the secondary standby load balancer in eu-central-1, specifying failover HTTP status codes (500, 502, 503, 504).
This establishes a resilient, edge-based failover mechanism that bypasses DNS cache propagation delays, meeting the low RTO requirement.
2
Configure the cache behavior for static content.
The default cache behavior (*) is configured with standard caching enabled (positive TTLs) to serve static assets from edge locations.
This offloads traffic from the backend origins, reducing latency and compute overhead.
3
Configure the cache behavior for the dynamic REST API.
A specific cache behavior for the path /api/* is created with caching disabled (TTLs set to 0), allowed HTTP methods configured to include POST, PUT, DELETE, and cache key settings configured to forward all headers, cookies, and query strings.
This ensures that transactional API calls bypass cache storage, preserve user session state, and execute successfully against the healthy backend.

Anahtar Kavram

CloudFront Origin Groups and Origin Failover combined with path-based cache behaviors for hybrid static/dynamic architectures.
Soru 190Soru

An educational institution is migrating its student enrollment system to AWS and will use Amazon RDS for SQL Server. The database must remain highly available within the primary AWS Region with a recovery time objective (RTO) of less than 2 minutes in the event of an Availability Zone failure. Failover must be completely automated, requiring no updates to the database endpoint in the application's configuration. Which configuration will meet these requirements?

Cevabı ve açıklamayı göster

Cevap: A Multi-AZ DB instance deployment

Cevap

A Multi-AZ DB instance deployment
The Multi-AZ DB instance deployment configuration is correct because Amazon RDS automatically provisions and maintains a synchronous standby replica in a different Availability Zone within the same AWS Region. In the event of a planned or unplanned outage of the primary DB instance, Amazon RDS automatically performs a failover to the standby instance. This failover process typically completes in under 2 minutes and updates the DNS CNAME record of the DB instance to point to the standby, eliminating the need to update database endpoints in the application configuration.

Adım Adım Çözüm

1
Analyze the high availability and recovery requirements.
Identify that the system requires a Recovery Time Objective (RTO) of less than 2 minutes, automatic failover across Availability Zones, and no manual configuration changes to the database endpoint.
This sets the criteria for evaluating RDS deployment configurations.
2
Evaluate the capabilities of RDS Multi-AZ deployments.
Confirm that Multi-AZ deployments provide synchronous replication, automatic failover within 1-2 minutes, and automatic DNS CNAME redirection.
Multi-AZ directly satisfies all the stated constraints of the scenario.
3
Evaluate the alternative configurations against the requirements.
Determine that Read Replicas do not support automatic failover, snapshots have a high RTO for restores, and Route 53 routing cannot manage database failover state.
This rules out the incorrect options.

Anahtar Kavram

Amazon RDS Multi-AZ Deployments
Tahmini Süre:45s
Soru 191Soru

A global company hosts a dynamic financial API across Application Load Balancers (ALBs) in the us-east-1 (primary) and eu-west-1 (secondary standby) Regions. The API requires ultra-low latency SSL/TLS handshakes, protection against Layer 7 SQL injection attacks, and immediate failover to the secondary region if the primary region's ALB starts returning HTTP 502 or 504 errors. The failover process must occur within seconds without relying on client-side DNS updates, and operational complexity must be kept to a minimum. Which of the following combinations of actions should the solutions architect take to meet these requirements? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Create an Amazon CloudFront distribution and configure an origin group containing the us-east-1 ALB as the primary origin and the eu-west-1 ALB as the secondary origin, setting the failover criteria to include 502 and 504 status codes.; Associate an AWS WAF web ACL directly with the Amazon CloudFront distribution to inspect incoming requests at the edge before they reach the ALBs.

Cevap

The solutions architect should create an Amazon CloudFront distribution with an origin group containing the primary us-east-1 ALB and the secondary eu-west-1 ALB (with failover criteria for 502 and 504 errors), and associate an AWS WAF web ACL directly with the CloudFront distribution.
Configuring CloudFront Origin Groups ensures that failover between the primary ALB in us-east-1 and the standby ALB in eu-west-1 happens within seconds at the CDN edge level, bypassing client-side DNS caching. Associating AWS WAF with CloudFront provides L7 security inspection at the edge, reducing latency and operational complexity by avoiding the management of multiple regional WAF ACLs.

Adım Adım Çözüm

1
Analyze the requirements for edge caching, low-latency handshakes, second-level failover, and Layer 7 protection.
Identify that DNS-based failover (Route 53) is too slow (minutes) due to TTL caching, whereas CloudFront Origin Groups handle failover at the CDN layer within seconds.
Choosing the correct failover mechanism is critical to meet the strict recovery time objective (seconds) and minimize handshake latency globally.
2
Select the edge-level resiliency configuration.
Determine that a CloudFront distribution with origin groups configured for failover on HTTP 502 and 504 codes matches the requirements.
This allows CloudFront to immediately retry requests on the secondary origin when the primary returns error responses, without requiring client DNS updates.
3
Evaluate security requirements for Layer 7 SQL injection protection.
Select AWS WAF associated directly with the CloudFront distribution to inspect traffic at the edge.
This provides L7 protection before traffic reaches the ALBs, reduces origin load, and simplifies operations compared to deploying regional WAFs on individual ALBs. AWS Shield Standard does not provide Layer 7 application filtering.

Anahtar Kavram

CloudFront Origin Groups provide sub-second failover for origin endpoints, while AWS WAF at the edge provides centralized Layer 7 protection and reduces latency by filtering requests before they reach regional infrastructure.
Soru 192Soru

A company is hosting a production web application on AWS that uses an Amazon RDS for MySQL DB instance. The database must be designed to survive the failure of a single Availability Zone (AZ) with minimal downtime and automatic failover. Additionally, the application requires read scaling to handle a high volume of reporting queries.

Which combination of configurations should a solutions architect implement to meet these requirements? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Deploy the RDS DB instance in a Multi-AZ configuration; Create one or more RDS Read Replicas for the database

Cevap

Deploy the RDS DB instance in a Multi-AZ configuration and create one or more RDS Read Replicas for the database.
To achieve high availability and automatic failover, the RDS instance should be deployed in a Multi-AZ configuration. To scale read traffic, one or more Read Replicas should be created.

Adım Adım Çözüm

1
Address the high availability and automatic failover requirement.
Identify that configuring the RDS instance for Multi-AZ deployment will automatically provision a synchronous standby replica in another Availability Zone, enabling automated failover.
Multi-AZ is the native AWS solution for high availability and automatic failover of RDS databases.
2
Address the read scaling requirement.
Identify that adding RDS Read Replicas allows the application to route read-heavy reporting queries to the replicas, reducing load on the primary DB instance.
Read Replicas asynchronously replicate data from the primary instance to support scaling read traffic.

Anahtar Kavram

High availability is achieved through Multi-AZ deployments, while read performance is scaled through Read Replicas.
Soru 193Soru

A company wants to improve the resiliency and availability of its static website hosted on Amazon S3. The website experiences occasional origin availability issues during regional outages. Which two configurations should a solutions architect implement to build a resilient content delivery solution? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Configure a CloudFront Origin Group with the primary S3 bucket as the primary origin and an S3 bucket in a different AWS Region as the failover origin.; Configure CloudFront custom error pages to serve a maintenance page cached at the edge when the origin returns a 503 Service Unavailable error.

Cevap

To build a resilient content delivery solution, the solutions architect should configure a CloudFront Origin Group with primary and secondary S3 buckets in different regions, and configure CloudFront custom error pages to serve a cached maintenance page during origin outages.
Configuring a CloudFront Origin Group provides automatic failover capability between a primary S3 bucket and a failover S3 bucket in a different region. Combining this with CloudFront custom error pages ensures that even if both origins fail or during transition periods, a friendly, cached maintenance page is served directly from edge locations, optimizing availability and user experience.

Adım Adım Çözüm

1
Set up multi-region origin redundancy by creating a secondary S3 bucket in another AWS Region and replicating static assets to it.
Two identical sets of static assets exist in different regions.
Ensures a backup origin is available in case the primary region experiences an outage.
2
Create a CloudFront Origin Group containing both the primary S3 bucket and the secondary S3 bucket.
An Origin Group is established with the secondary bucket designated as the failover origin.
Allows CloudFront to automatically redirect requests when the primary origin is unreachable or returns designated error codes.
3
Configure CloudFront custom error pages for HTTP status code 503.
A custom error page pointing to a static maintenance file is cached at edge locations.
Ensures that even during failover transitions or complete origin failures, users receive a friendly cached response directly from the edge.

Anahtar Kavram

Leveraging CloudFront Origin Groups and Custom Error Pages to build resilient content delivery architectures that survive regional S3 origin outages.
Tahmini Süre:1m 30s
Soru 194Soru

A company is migrating its transactional application to Amazon RDS. To prevent downtime during an infrastructure failure or an Availability Zone outage, the solutions architect must configure the database for automatic failover to a standby instance in another Availability Zone with zero manual intervention. Which database configuration should the solutions architect recommend?

Cevabı ve açıklamayı göster

Cevap: An Amazon RDS Multi-AZ deployment

Cevap

An Amazon RDS Multi-AZ deployment
The correct option is the Amazon RDS Multi-AZ deployment. Multi-AZ deployments provide high availability and failover support for DB instances. AWS automatically provisions and maintains a synchronous standby replica in a different Availability Zone. In the event of a failure, the primary DB instance is failed over to the standby replica automatically, ensuring high availability with zero administrative overhead.

Adım Adım Çözüm

1
Identify the high availability and recovery time objective requirements.
The company requires automated failover to a standby instance in a different Availability Zone with zero manual intervention.
This rules out solutions that require manual failover procedures or application-level reconfiguration.
2
Evaluate the failover and replication characteristics of the options.
RDS Multi-AZ uses synchronous replication to a standby replica in another AZ and performs automatic failover when the primary instance becomes unavailable. Read Replicas use asynchronous replication and require manual promotion.
Only RDS Multi-AZ satisfies the requirement for automatic, zero-intervention failover in another AZ.

Anahtar Kavram

Amazon RDS Multi-AZ deployments provide automatic failover and high availability by maintaining a synchronous standby replica in a different Availability Zone.
Soru 195Soru

An automotive engineering firm is designing a disaster recovery solution for its on-premises computer-aided design (CAD) file server, which holds 40 TB40\text{ TB} of data. The firm has defined a Recovery Point Objective (RPO) of 4 hours4\text{ hours} and a Recovery Time Objective (RTO) of 2 hours2\text{ hours}. During normal operations, on-premises users must access these files with sub-millisecond local latency. In the event of a local site failure, the files must be immediately accessible from a highly available and resilient environment in AWS. Which storage architecture meets these requirements most cost-effectively?

Cevabı ve açıklamayı göster

Cevap: Deploy AWS Storage Gateway in cached volume mode on-premises. Cache frequently accessed files locally, store the full dataset in Amazon S3, and schedule volume snapshots every 4 hours4\text{ hours}. In a disaster recovery event, restore the snapshots as Amazon Elastic Block Store (Amazon EBS) volumes and attach them to Amazon EC2 instances.

Cevap

Deploy AWS Storage Gateway in cached volume mode on-premises, storing the full dataset in Amazon S3, scheduling snapshots every 4 hours4\text{ hours}, and restoring these snapshots to Amazon EBS volumes attached to Amazon EC2 instances during a disaster.
The correct solution uses AWS Storage Gateway in cached volume mode to store the master dataset in Amazon S3 and cache active files locally for sub-millisecond access. Taking snapshots every 4 hours4\text{ hours} meets the 4-hour4\text{-hour} RPO, and restoring those snapshots to EBS volumes attached to EC2 instances in a disaster meets the 2-hour2\text{-hour} RTO.

Adım Adım Çözüm

1
Analyze the local latency and storage architecture requirements.
The requirement for sub-millisecond local latency on-premises indicates that frequently accessed data must be cached locally. AWS Storage Gateway in cached volume mode fulfills this by storing the primary dataset in Amazon S3 and maintaining a local cache of active data.
This minimizes local latency while ensuring durability by storing the master copy in the AWS cloud.
2
Evaluate the Recovery Point Objective (RPO) constraint.
An RPO of 4 hours4\text{ hours} means that backup or replication frequency must occur at least every 4 hours4\text{ hours} to prevent losing more than 4 hours4\text{ hours} of data.
Scheduling volume snapshots every 4 hours4\text{ hours} directly satisfies this requirement.
3
Evaluate the Recovery Time Objective (RTO) constraint.
An RTO of 2 hours2\text{ hours} means the system must be restored and running within 2 hours2\text{ hours}. Restoring EBS snapshots and attaching them to EC2 instances takes minutes, which is well within the 2-hour2\text{-hour} window.
Using Standard retrieval from Glacier Flexible Retrieval (which takes 33 to 5 hours5\text{ hours}) is ruled out because it cannot meet this RTO.

Anahtar Kavram

AWS Storage Gateway cached volumes provide low-latency local access to frequently used data while securing the full dataset in Amazon S3, allowing rapid disaster recovery via EBS snapshots.
Tahmini Süre:1m 30s
Soru 196Soru

A global manufacturing firm runs a quality-control imaging system across several physical factories. The local factory systems require low-latency access to raw imaging data generated during the last 30 days. After 30 days, the data must be archived in the cloud, where it must remain durable and highly available for regulatory audits, with a Recovery Time Objective (RTO) of 5 hours. To protect against a regional disaster, all cloud archives must be replicated to a secondary AWS Region with a Recovery Point Objective (RPO) of 15 minutes. Which combination of actions should a solutions architect recommend to satisfy these requirements? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Deploy an Amazon S3 File Gateway at each physical factory to provide low-latency local access to the active files while automatically uploading the data to an Amazon S3 bucket in the primary Region.; Configure Amazon S3 Cross-Region Replication (CRR) to a secondary Region with S3 Replication Time Control (RTC) enabled, and apply S3 Lifecycle rules to transition objects to Amazon S3 Glacier Flexible Retrieval after 30 days.

Cevap

Deploying an Amazon S3 File Gateway at the factories to provide local caching, and configuring Amazon S3 Cross-Region Replication with Replication Time Control enabled along with lifecycle rules to transition objects to Amazon S3 Glacier Flexible Retrieval after 30 days.
The correct options involve deploying an Amazon S3 File Gateway at the factories to provide low-latency local access to the active files while uploading data to S3, and configuring Amazon S3 Cross-Region Replication (CRR) with S3 Replication Time Control (RTC) enabled to meet the 15-minute RPO. Additionally, using S3 Lifecycle rules to transition objects to Amazon S3 Glacier Flexible Retrieval after 30 days is correct because standard retrieval takes 3-5 hours, which satisfies the 5-hour RTO limit.

Adım Adım Çözüm

1
Analyze the local low-latency access requirement for files under 30 days old.
Local users need fast access to files. An Amazon S3 File Gateway provides local caching (NFS/SMB) at physical locations while keeping data backed up to Amazon S3.
Direct cloud access could introduce high latency and fail bandwidth constraints for large imaging files.
2
Evaluate the 15-minute RPO disaster recovery requirement for the cloud storage.
Configure Amazon S3 Cross-Region Replication (CRR) with S3 Replication Time Control (RTC) enabled.
S3 RTC guarantees that 99.9% of uploaded objects are replicated to the destination Region within 15 minutes, fulfilling the strict 15-minute RPO.
3
Verify the RTO requirement of 5 hours for archived data.
Transition objects to Amazon S3 Glacier Flexible Retrieval after 30 days using S3 Lifecycle policies.
S3 Glacier Flexible Retrieval supports Standard retrievals within 3-5 hours, which satisfies the 5-hour RTO, whereas Glacier Deep Archive requires up to 12 hours.

Anahtar Kavram

Designing hybrid cloud storage systems using Amazon S3 File Gateway for local caching, combined with cross-region replication (RTC) and S3 Glacier Flexible Retrieval to meet strict RTO and RPO objectives.
Soru 197Soru

A solutions architect is configuring an active-passive disaster recovery strategy in Amazon Route 53. The primary application runs on an Application Load Balancer (ALB), and the backup site is a static website hosted on Amazon S3. Which of the following Route 53 record configurations must the solutions architect create to implement this failover mechanism? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: A Failover record pointing to the Application Load Balancer with the Failover Record Type set to Primary and Evaluate Target Health set to Yes; A Failover record pointing to the Amazon S3 bucket website endpoint with the Failover Record Type set to Secondary

Cevap

The correct configurations are creating a Failover record pointing to the Application Load Balancer with the Failover Record Type set to Primary and Evaluate Target Health set to Yes, and creating a Failover record pointing to the Amazon S3 bucket website endpoint with the Failover Record Type set to Secondary.
To set up active-passive failover in Route 53, you must create a Primary record using the Failover routing policy pointing to the active resource (the ALB) and enable 'Evaluate Target Health'. You must also create a Secondary record using the Failover routing policy pointing to the standby resource (the S3 bucket website endpoint). When the primary resource is determined to be unhealthy, Route 53 automatically shifts DNS traffic to the secondary resource.

Adım Adım Çözüm

1
Define the primary routing policy.
Create a Failover routing policy record for the primary Application Load Balancer (ALB) and set its Failover Record Type to Primary.
This establishes the ALB as the active resource under normal operating conditions.
2
Enable health monitoring on the primary record.
Set Evaluate Target Health to Yes on the primary record.
Route 53 uses this setting to monitor the ALB's health and trigger failover if the ALB becomes unhealthy.
3
Define the backup routing policy.
Create a second Failover routing policy record for the static Amazon S3 website endpoint and set its Failover Record Type to Secondary.
This establishes the static S3 website as the standby resource that Route 53 routes traffic to when the primary ALB is unhealthy.

Anahtar Kavram

Route 53 active-passive DNS failover configurations use Failover routing policies with defined Primary and Secondary records, where the Primary record evaluates the target's health to determine when to route traffic to the Secondary record.
Soru 198Soru

A solutions architect is designing a highly resilient architecture for a web application. The application's static assets are stored in a primary Amazon S3 bucket in one AWS Region. The architect needs to ensure that the assets remain available even if the primary S3 bucket experiences an outage, by failing over to a backup S3 bucket in a different Region with minimal operational complexity. Which configuration will meet these requirements?

Cevabı ve açıklamayı göster

Cevap: Create an Amazon CloudFront origin group with the primary S3 bucket as the primary origin and the backup S3 bucket as the secondary origin.

Cevap

Create an Amazon CloudFront origin group with the primary S3 bucket as the primary origin and the backup S3 bucket as the secondary origin.
Creating a CloudFront origin group is the most efficient and native way to configure failover for static assets. By grouping the primary and secondary S3 buckets, CloudFront automatically reroutes incoming requests to the backup bucket when the primary bucket returns error codes indicating an outage.

Adım Adım Çözüm

1
Identify the primary goal: Establish automatic failover of static content stored in Amazon S3 to a backup bucket in a different Region with minimal operational complexity.
Realized that a global content delivery network like Amazon CloudFront is the best practice for caching static assets and managing origin failover natively.
CloudFront natively supports origin failover using origin groups, which requires no custom code or complex DNS setups.
2
Configure a CloudFront distribution with two S3 bucket origins.
Created a primary origin pointing to the primary S3 bucket and a secondary origin pointing to the backup S3 bucket.
Both origins must be defined in the distribution configuration before they can be grouped.
3
Group the two origins into a CloudFront origin group.
Established an origin group where the primary S3 bucket is the primary origin, and the backup S3 bucket is the secondary origin, specifying the HTTP status codes that trigger failover.
This setup allows CloudFront to automatically redirect requests to the backup bucket if the primary bucket returns status codes like 500, 502, 503, or 504.

Anahtar Kavram

CloudFront Origin Groups and Origin Failover
Soru 199Soru

A company hosts a media portal on AWS that serves high-traffic static images and video clips. The static assets are stored in an Amazon S3 bucket in the us-east-1 Region. To ensure maximum availability, the company replicates these assets to another S3 bucket in the us-west-2 Region. The company wants to implement a solution that caches content globally to reduce latency for users. The architecture must automatically serve assets from the backup Region if the primary S3 bucket returns server errors (HTTP 500-class). Additionally, the portal must be protected against application-layer (Layer 7) HTTP flood attacks. The solution should minimize latency and operational overhead.

Which combination of actions should a solutions architect take to meet these requirements? (Select two.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Create an Amazon CloudFront distribution. Configure a CloudFront origin group with the primary S3 bucket as the primary origin and the backup S3 bucket as the secondary origin, setting the failover criteria to include HTTP status codes 500, 502, 503, and 504.; Create an AWS WAF web ACL with a rate-based rule to limit requests from individual client IP addresses. Associate the web ACL with the CloudFront distribution.

Cevap

To meet the requirements, the solutions architect must create an Amazon CloudFront distribution and configure an origin group with the primary S3 bucket as the primary origin and the backup S3 bucket as the secondary origin (failing over on 5xx status codes). Additionally, the solutions architect must create an AWS WAF web ACL with a rate-based rule and associate it with the CloudFront distribution.
Configuring Amazon CloudFront with an origin group enables automatic failover to a backup S3 bucket in a different Region when the primary bucket returns 5xx errors, ensuring continuous availability of static content at the edge. Integrating AWS WAF with CloudFront allows the solutions architect to apply rate-limiting rules at the edge, blocking Layer 7 HTTP flood attacks before they impact the origin buckets.

Adım Adım Çözüm

1
Configure global content delivery and caching using Amazon CloudFront.
Static assets are cached at CloudFront edge locations worldwide, drastically reducing latency for global users.
This establishes the core caching mechanism required to optimize performance for static assets.
2
Configure a CloudFront Origin Group with the primary S3 bucket as primary and backup S3 bucket as secondary, enabling failover on 500, 502, 503, and 504 codes.
If the primary S3 bucket becomes unavailable or returns a 5xx error, CloudFront seamlessly fetches the asset from the secondary S3 bucket without exposing the error to the user.
This configuration provides automated, low-latency origin failover to ensure content resiliency.
3
Create an AWS WAF web ACL with a rate-based rule and associate it with the CloudFront distribution.
Individual client IPs exceeding the specified request rate threshold are blocked at the CloudFront edge.
AWS WAF is the correct service for protecting the application from Layer 7 HTTP flood attacks, mitigating threats before they reach S3.

Anahtar Kavram

Using Amazon CloudFront origin groups to achieve automated, high-availability origin failover for static assets combined with AWS WAF for edge security against Layer 7 HTTP flood attacks.
Soru 200Soru

A healthcare provider is deploying a patient prescription tracking application across two AWS Regions: useast1us-east-1 (Primary) and uswest2us-west-2 (Secondary). The application backend uses an Amazon Aurora PostgreSQL DB cluster. The solutions architect must design a highly resilient architecture that meets a Recovery Time Objective (RTO) of under 55 minutes and a Recovery Point Objective (RPO) of under 11 minute for regional disaster recovery, while also providing high availability within the primary region (RTO of under 6060 seconds, RPO of 00) and scaling read traffic locally in uswest2us-west-2. Which two configurations should the solutions architect implement to meet these requirements? (Select two.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Deploy the primary Amazon Aurora PostgreSQL DB cluster in useast1us-east-1 across multiple Availability Zones, ensuring at least one reader instance is running in a different Availability Zone than the writer instance.; Configure an Amazon Aurora Global Database with the primary cluster in useast1us-east-1 and a secondary cluster in uswest2us-west-2, provisioning at least one reader instance in the secondary cluster.

Cevap

Deploying the primary Amazon Aurora PostgreSQL DB cluster in us-east-1 across multiple Availability Zones, ensuring at least one reader instance is running in a different Availability Zone than the writer instance, and configuring an Amazon Aurora Global Database with the primary cluster in us-east-1 and a secondary cluster in us-west-2 containing at least one reader instance.
Deploying the primary Amazon Aurora PostgreSQL database cluster in a Multi-AZ configuration ensures that the storage layer replicates data across multiple Availability Zones synchronously. If the primary writer instance fails, Aurora automatically promotes a reader instance in a different Availability Zone in under 60 seconds with zero data loss, achieving the local high availability goals. Meanwhile, configuring an Amazon Aurora Global Database creates a dedicated cross-region replication channel. The database is replicated asynchronously at the physical storage level with replication lag typically under 1 second, meeting the 1-minute RPO. The secondary cluster reader instance in the secondary region scales local reads and can be promoted to a writer within minutes to meet the 5-minute RTO during a disaster recovery scenario.

Adım Adım Çözüm

1
Evaluate the high availability (HA) constraints in the primary region (useast1us-east-1).
An RTO of under 6060 seconds and RPO of 00 is identified. To meet this, the primary database must be deployed across multiple Availability Zones with synchronous storage replication and a standby reader instance ready for automatic failover.
Ensures that local infrastructure or AZ failure triggers automated failover with no data loss.
2
Evaluate the regional disaster recovery (DR) and read-scaling requirements in the secondary region (uswest2us-west-2).
An RTO of under 55 minutes and RPO of under 11 minute is identified, along with the need to serve local reads. A cross-region replication mechanism with sub-minute lag is required.
Determines the target disaster recovery mechanism that also allows active read workloads.
3
Select the correct combination of Amazon Aurora features to satisfy the constraints.
Aurora Multi-AZ deployment is selected for primary region HA, and Aurora Global Database with a secondary reader in us-west-2 is selected for regional DR and local read scaling.
Aurora Global Database replicates data storage-to-storage with a typical lag of under 11 second and supports seamless, low-RTO failovers.

Anahtar Kavram

Combining Amazon Aurora Multi-AZ deployment for local high availability with Amazon Aurora Global Database for cross-region disaster recovery and local read scaling.
ÖncekiSayfa 10 / 20Sonraki