Examkin

Soru

Zorluk: OrtaDatabase and Storage Strategy

A collaborative workspace company is designing a new project management application. The application requires a transactional metadata store for workspace properties and document access history, which must support high-frequency reads and writes with automated failover. The application also stores document files that must be highly available initially, but are rarely accessed after 30 days. The security team requires that all data must be encrypted at rest and support cross-account access delegation to external partners. Which combination of AWS database and storage strategies should the solutions architect select to meet these requirements? (Select TWO.)

  1. Use Amazon Aurora PostgreSQL for the transactional metadata, configuring Aurora Replicas across multiple Availability Zones to handle read scaling and automate failover.Cevap
  2. Store the document files in Amazon S3, and implement an S3 Lifecycle rule to transition documents to Amazon S3 Standard-Infrequent Access (S3 Standard-IA) after 30 days.Cevap
  3. C
    Store the transactional metadata in Amazon RDS for PostgreSQL in a Multi-AZ deployment, and configure the application to read from the standby instance in the secondary Availability Zone during peak traffic.
  4. D
    Store document files in Amazon S3, encrypting the objects using the default AWS KMS AWS-managed key (aws/s3) and configuring bucket policies to delegate cross-account access to external partners.
  5. E
    Use Amazon ElastiCache for Memcached to store transactional metadata with multi-AZ replication to ensure metadata persistence and low-latency failover.

Cevap

Use Amazon Aurora PostgreSQL for the metadata with multi-AZ replicas to scale reads and automate failover, and store document files in Amazon S3 with an S3 Lifecycle rule to transition files to S3 Standard-IA after 30 days.
The correct strategy combines Amazon Aurora PostgreSQL for high-performance transactional metadata (using Aurora Replicas to scale reads and handle automated failover) and Amazon S3 for document storage (using S3 Lifecycle policies to transition objects to S3 Standard-IA after 30 days to reduce costs). S3 buckets and Aurora databases can be encrypted using Customer Managed KMS Keys to allow cross-account access policy modifications.

Adım Adım Çözüm

1
Analyze the transactional metadata requirements for the workspace application.
The metadata database requires high-frequency OLTP read and write scalability and automated failover. Amazon Aurora PostgreSQL with multi-AZ Aurora Replicas satisfies these requirements by allowing reads from replicas and supporting automated, rapid failover.
This establishes the optimal relational database engine that can scale dynamically.
2
Analyze the document storage and access patterns.
The files require highly available object storage, but access frequency drops significantly after 30 days. Storing documents in Amazon S3 Standard and applying a Lifecycle policy to transition them to Amazon S3 Standard-IA after 30 days optimizes storage costs.
This balances durability and cost-efficiency over the lifespan of the documents.
3
Evaluate the encryption and cross-account access delegation requirements.
The security team requires KMS encryption with cross-account access delegation. This necessitates Customer Managed Keys (CMKs) because their key policies can be modified to trust external accounts, which is not possible with AWS-managed keys.
This ensures the security constraints are fully met.

Anahtar Kavram

Selecting and combining cost-effective, secure, and highly available database and storage solutions based on access patterns and workload requirements.
Tahmini Süre:2m 0s
Bu soruyu puanla

Konular

Database and Storage Strategy

Bu konudan daha fazla soru