Examkin

Soru

Zorluk: Çok zorHigh Availability and Disaster Recovery Design

An advertising technology organization is building a real-time bidding application across two AWS Regions: us-east-1 (Primary) and us-west-2 (Secondary). The database backend requires a recovery point objective (RPO) of less than 1 minute and a recovery time objective (RTO) of less than 5 minutes. The architecture must dynamically route client traffic to the region with the lowest latency, and automatically fail over to the remaining region if one region becomes degraded. In addition, the application servers in the private subnets of both regions require highly resilient outbound internet access for third-party API verification. Which TWO options should the solutions architect combine to meet these requirements?

  1. Deploy an Amazon Aurora Global Database with the primary cluster in us-east-1 and a secondary cluster in us-west-2. During a regional failure, promote the secondary cluster to primary using a managed failover.Cevap
  2. Configure Amazon Route 53 latency-based routing policies pointing to Application Load Balancers (ALBs) in both regions, associate each routing record with a Route 53 health check, and deploy a NAT Gateway in every Availability Zone containing compute resources in both VPCs.Cevap
  3. C
    Deploy a single NAT Gateway in a public subnet in us-east-1 and another single NAT Gateway in a public subnet in us-west-2 to handle outbound internet traffic for the private subnets across all Availability Zones in each respective VPC.
  4. D
    Configure AWS Backup to replicate RDS snapshots from us-east-1 to us-west-2 every 4 hours, and configure a warm standby Aurora PostgreSQL cluster in us-west-2 to restore from the latest snapshot during a failover event.
  5. E
    Deploy a primary Amazon RDS for PostgreSQL instance with Multi-AZ enabled in us-east-1 and configure a cross-region read replica in us-west-2, relying on the Multi-AZ standby instance in us-west-2 to dynamically scale read workloads.
  6. F
    Create a Route 53 Private Hosted Zone (PHZ) for internal service endpoints in the primary VPC of us-east-1, and rely on custom DNS forwarders to query this zone from the VPC in us-west-2 without associating the PHZ directly with the us-west-2 VPC.

Cevap

Deploy Amazon Aurora Global Database for multi-region database replication and managed failover, and configure Route 53 latency-based routing with health checks combined with NAT Gateways deployed in every Availability Zone in both regions.
To achieve an RPO of less than 1 minute and RTO of less than 5 minutes for database operations, deploying Amazon Aurora Global Database is the ideal pattern. It offers asynchronous replication with lag typically under 1 second and supports managed failover. For routing and high availability, using Route 53 latency-based routing with health checks ensures traffic is routed to the closest healthy region. Deploying a NAT Gateway in each Availability Zone prevents a single Availability Zone outage from disrupting outbound connectivity.

Adım Adım Çözüm

1
Evaluate the database tier requirements against the target RTO (under 5 minutes) and RPO (under 1 minute).
Identify that snapshot replication or typical cross-region database backups cannot meet the sub-minute RPO. Choose Amazon Aurora Global Database, which offers replication lag under 1 second and managed cross-region failover that meets both constraints.
Aurora Global Database replicates data asynchronously with minimal lag and allows promoting a secondary region to primary in less than a minute.
2
Design client routing to satisfy the low-latency target and automatically redirect requests if a region fails.
Implement Route 53 latency-based routing pointing to the Application Load Balancers (ALBs) in both regions and configure Route 53 active health checks on the ALBs.
Latency-based routing routes requests to the region that offers the lowest latency, while health checks ensure that traffic is dynamically diverted to the other region if one region becomes unavailable.
3
Ensure high availability and fault tolerance for outbound internet traffic in the private subnets.
Provision a NAT Gateway in each Availability Zone containing compute resources in both VPCs.
Deploying a single NAT Gateway per VPC creates a single point of failure; if the Availability Zone containing that NAT Gateway fails, instances in other zones lose outbound internet access.

Anahtar Kavram

High Availability and Disaster Recovery Design
Tahmini Süre:3m 0s
Bu soruyu puanla

Konular

High Availability and Disaster Recovery Design

Bu konudan daha fazla soru