Examkin

Soru

Zorluk: OrtaDatabase and Storage Strategy

An enterprise is building a new content delivery portal. The architecture requires two storage tiers:

1. A persistent store for user session data (NoSQL workload) requiring sub-millisecond latencies for active sessions and active-active replication between two AWS regions.
2. A shared file system (File storage) to host legacy application files that must be concurrently mounted by multiple Linux-based Amazon EC2 instances across three Availability Zones. The file system must be encrypted at rest using a key that allows the enterprise to delegate access to a central security auditing account.

Which two storage and database configurations should the solutions architect select to meet these requirements? (Select TWO.)

  1. Amazon DynamoDB global tables to store the user session data.Cevap
  2. Amazon Elastic File System (Amazon EFS) encrypted at rest using a customer managed KMS key.Cevap
  3. C
    Amazon ElastiCache for Memcached configured with cross-region replication to store the user session data.
  4. D
    Amazon Elastic File System (Amazon EFS) encrypted at rest using the default AWS managed KMS key (aws/elasticfilesystem).
  5. E
    Amazon RDS Multi-AZ standby instances deployed in the secondary region to serve read traffic for session data.

Cevap

Amazon DynamoDB global tables to store the user session data, and Amazon Elastic File System (Amazon EFS) encrypted at rest using a customer managed KMS key.
To store the NoSQL user session data with sub-millisecond latency and active-active replication, Amazon DynamoDB global tables are the optimal choice. For the legacy shared file system, Amazon Elastic File System (Amazon EFS) natively supports concurrent mounts across multiple Availability Zones for Linux-based EC2 instances. To allow cross-account access delegation to the security auditing account, EFS must be encrypted at rest with a customer managed KMS key, as its key policy can be customized to grant cross-account permissions.

Adım Adım Çözüm

1
Analyze the session data requirements: NoSQL workload, sub-millisecond latencies, active-active cross-region replication.
Identify Amazon DynamoDB global tables as the matching service because DynamoDB is a NoSQL store that supports sub-millisecond read/write latency with global tables offering active-active multi-region replication.
This guarantees that session data is available and replicated across both target regions with high performance.
2
Analyze the file storage requirements: shared file system concurrently mounted by Linux instances across three Availability Zones.
Identify Amazon Elastic File System (Amazon EFS) as the appropriate managed file storage service since it supports NFSv4 mounts across multiple Availability Zones concurrently.
EFS is a native shared file storage service designed for concurrent access from Linux hosts.
3
Evaluate key delegation requirements for EFS encryption at rest.
Choose a customer managed KMS key rather than an AWS managed key.
AWS managed keys do not support policy modification to delegate cross-account access to the security auditing account, whereas customer managed keys support full policy customization.

Anahtar Kavram

Selecting appropriate database and storage services based on workload characteristics (NoSQL vs. File), performance parameters, replication capabilities, and cross-account encryption access control requirements.
Tahmini Süre:2m 30s
Bu soruyu puanla

Konular

Database and Storage Strategy

Bu konudan daha fazla soru