Examkin

Soru

Zorluk: OrtaDatabase and Storage Strategy

A medical diagnostics company is designing a new cloud-native patient monitoring and analytics platform. The platform must ingest high-velocity streaming telemetry data from wearable medical devices, which represents a write-heavy NoSQL workload. It must also store structured patient metadata requiring transactional consistency in an OLTP database. The platform must meet a recovery time objective (RTO) of less than 1 minute and a recovery point objective (RPO) of near-zero for disaster recovery. Additionally, all database storage must be encrypted using keys that can be audited by a centralized security account in another AWS organization.

Which of the following database and storage configurations should the solutions architect select to meet these requirements? (Select TWO.)

  1. Implement Amazon DynamoDB to ingest the streaming device telemetry, utilizing customer managed keys (CMKs) in AWS Key Management Service (AWS KMS) for encryption.Cevap
  2. Deploy Amazon Aurora PostgreSQL with Aurora Global Database across two AWS regions to store the patient metadata, utilizing regional Customer Managed Keys (CMKs) for encryption.Cevap
  3. C
    Deploy Amazon RDS for PostgreSQL with Multi-AZ enabled to store the patient metadata, and configure the application to route read-heavy analytical queries to the standby replica in the secondary Availability Zone.
  4. D
    Store the patient metadata in Amazon RDS for PostgreSQL, utilizing the default AWS-managed KMS key (aws/rds) for encryption, and configure a cross-account IAM policy to allow the central security account to manage the key.
  5. E
    For the patient metadata database, implement a cross-region pilot light disaster recovery strategy where daily Amazon RDS snapshots are copied to a secondary region to minimize replication costs.

Cevap

The correct configurations are to implement Amazon DynamoDB with AWS KMS Customer Managed Keys for the streaming NoSQL telemetry workload, and deploy Amazon Aurora PostgreSQL with Aurora Global Database and Customer Managed Keys for the patient metadata workload.
The correct options select Amazon DynamoDB with customer managed keys (CMKs) and Amazon Aurora PostgreSQL with Aurora Global Database. DynamoDB effectively addresses the high-velocity write-heavy NoSQL telemetry workload. Using CMKs for encryption allows the organization to modify the key policy to grant the central security account cross-account decryption/management permissions for auditing purposes. For the metadata workload, Aurora Global Database replicates data to a secondary region with typical latency under 1 second, satisfying the RPO requirement, and can be promoted to a primary database in less than a minute, satisfying the RTO requirement.

Adım Adım Çözüm

1
Analyze the streaming NoSQL workload requirements.
Amazon DynamoDB is selected due to its ability to handle high-velocity write-heavy workloads, and encrypting it using Customer Managed Keys (CMKs) allows for the cross-account auditing policy modification.
DynamoDB is a fully managed NoSQL database that scales seamlessly, and CMKs are required to enable auditing access from a separate security account.
2
Analyze the transactional OLTP metadata workload and disaster recovery (RTO/RPO) requirements.
Amazon Aurora PostgreSQL with Aurora Global Database is selected because it replicates data cross-region with a latency of less than 1 second, supporting an RTO of under 1 minute.
Standard RDS Multi-AZ or pilot light snapshot strategies cannot achieve near-zero RPO and sub-minute RTO across regions during a disaster scenario.
3
Evaluate the encryption and auditing requirements.
Customer Managed Keys (CMKs) must be used for both databases because AWS-managed keys cannot be shared with the central security account.
AWS KMS key policies for AWS-managed keys cannot be edited to delegate access to other AWS accounts.

Anahtar Kavram

Selecting appropriate database engines and encryption configurations to meet performance, disaster recovery, and multi-account security requirements.
Bu soruyu puanla

Konular

Database and Storage Strategy

Bu konudan daha fazla soru