Examkin

Soru

Zorluk: OrtaEnhancing Reliability and Disaster Recovery

A logistics tracking company hosts its core API services in the us-east-1 Region. The system consists of an Application Load Balancer (ALB) that routes traffic to Amazon EC2 instances across three Availability Zones. The EC2 instances process coordinates and call external mapping services via a single NAT Gateway located in a single public subnet. The backend database is an Amazon Aurora PostgreSQL DB cluster. To enhance reliability and design a disaster recovery (DR) solution, the company is targeting the us-west-2 Region. The business requires a recovery time objective (RTO) of 1515 minutes and a recovery point objective (RPO) of 55 minutes. The network architecture in us-east-1 must also be made resilient to Availability Zone outages. Which combination of actions should a Solutions Architect recommend to satisfy these requirements? (Select TWO.)

  1. Convert the Amazon Aurora PostgreSQL database to an Amazon Aurora Global Database with the primary cluster in us-east-1 and a secondary cluster in us-west-2.Cevap
  2. Deploy an individual NAT Gateway in each of the three public subnets in us-east-1. Configure the private subnet route tables to route outbound traffic through the NAT Gateway located in the corresponding Availability Zone.Cevap
  3. C
    Configure AWS Backup to perform hourly snapshots of the Aurora PostgreSQL database and copy them to us-west-2. Restore from the latest copied snapshot during failover.
  4. D
    Configure a Route 53 failover routing policy pointing to the Application Load Balancer in us-east-1 and a disaster recovery ALB in us-west-2, but disable Route 53 health checks to prevent premature failover.
  5. E
    Deploy a single NAT Gateway in us-west-2. Establish an AWS Transit Gateway peering connection between us-east-1 and us-west-2, and route all outbound internet traffic from us-east-1 through the us-west-2 NAT Gateway.

Cevap

To meet the reliability and disaster recovery goals, the database should be converted to an Amazon Aurora Global Database to achieve low-latency cross-region replication, and a NAT Gateway should be deployed in each public subnet of the primary region to eliminate single Availability Zone dependencies for outbound traffic.
Converting the database to an Amazon Aurora Global Database provides physical replication to the secondary region with sub-second replication lag and rapid promotion, ensuring both the 55-minute RPO and the 1515-minute RTO are satisfied. Deploying a NAT Gateway in each Availability Zone ensures that the failure of a single zone does not impact the outbound internet access of instances in the remaining zones, eliminating the single point of failure.

Adım Adım Çözüm

1
Analyze the database replication requirements for the secondary region.
Identify that the replication lag must be less than 55 minutes to satisfy the RPO constraint, and failover must occur within 1515 minutes to satisfy the RTO constraint.
This establishes the database parameters required to support the target DR objectives.
2
Select the cross-region database replication mechanism.
Choose Amazon Aurora Global Database, which offers physical replication with sub-second lag and fast promotion capabilities.
Aurora Global Database meets the RPO of 55 minutes and supports an RTO of less than 1515 minutes through managed failover.
3
Evaluate the network path for outbound internet connectivity in the primary region.
Identify that routing all private subnets through a single NAT Gateway creates a single point of failure if that subnet or its Availability Zone fails.
Outbound connectivity must remain operational for the other zones during a single Availability Zone outage.
4
Design high availability for outbound traffic.
Deploy three NAT Gateways (one per public subnet in each Availability Zone) and update the private route tables to route outbound traffic through their local NAT Gateway.
This isolates Availability Zone network paths, preventing a failure in one zone from affecting outbound traffic in other zones.

Anahtar Kavram

Disaster Recovery pattern implementation and high availability network path engineering
Bu soruyu puanla

Konular

Enhancing Reliability and Disaster Recovery