Examkin

Soru

Zorluk: OrtaDatabase and Storage Strategy

A logistics enterprise is designing a new fleet tracking application. The architecture includes a write-heavy telemetry ingestion service (NoSQL workload) that must process up to 30,000 writes/second30,000\text{ writes/second} with sub-10 ms10\text{ ms} latency. It also includes an administrative portal (OLTP workload) for managing vehicle metadata and driver schedules. The administrative data requires encryption at rest using a Customer Managed Key (CMK) to allow a dedicated compliance team in a separate AWS account to run weekly audit queries directly on database replicas. The disaster recovery requirements specify a Recovery Point Objective (RPO) of 5 minutes5\text{ minutes} and a Recovery Time Objective (RTO) of 15 minutes15\text{ minutes}. Which database and storage design meets these requirements?

  1. Deploy Amazon DynamoDB for the telemetry workload, and deploy an Amazon Aurora PostgreSQL DB cluster with Aurora Replicas for the vehicle metadata workload. Encrypt the Aurora cluster using a Customer Managed Key (CMK), grant the compliance account key usage permissions in the key policy, and configure the compliance team to query the Aurora Replicas.Cevap
  2. B
    Deploy Amazon DynamoDB for the telemetry workload, and deploy an Amazon RDS for PostgreSQL DB instance with a Multi-AZ deployment for the vehicle metadata workload. Configure the compliance team to query the Multi-AZ standby instance directly to avoid performance impacts. Encrypt the database using the AWS-managed key 'aws/rds'.
  3. C
    Deploy Amazon RDS for PostgreSQL with a Multi-AZ deployment for both workloads. Export database backups daily to Amazon S3, encrypting them with the AWS-managed key 'aws/rds', and configure the compliance team to query the data using Amazon Athena. Configure Amazon RDS Read Replicas to handle the disaster recovery RTO and RPO.
  4. D
    Deploy Amazon DynamoDB for the telemetry workload, and deploy an Amazon Aurora PostgreSQL DB cluster for the vehicle metadata workload. Encrypt the Aurora cluster using the AWS-managed key 'aws/rds'. Direct the compliance team to query the primary Aurora DB instance directly during scheduled maintenance windows to minimize lock contention.

Cevap

Deploy Amazon DynamoDB for the telemetry workload and Amazon Aurora PostgreSQL for the metadata workload, using a Customer Managed Key for encryption to support cross-account replica queries.
The correct option proposes using Amazon DynamoDB for the high-throughput NoSQL telemetry workload and Amazon Aurora PostgreSQL for the OLTP metadata workload. Aurora PostgreSQL provides read replicas that can be queried by the compliance team. Encrypting the cluster with a Customer Managed Key (CMK) allows the primary account to delegate access to the compliance account by modifying the KMS key policy, satisfying both the security and auditing requirements.

Adım Adım Çözüm

1
Identify the storage requirements for the telemetry ingestion workload (30,000 writes/second30,000\text{ writes/second} with sub-10 ms10\text{ ms} latency) and the administrative metadata workload.
The telemetry ingestion requires a highly scalable NoSQL database like Amazon DynamoDB. The metadata requires a relational OLTP database like Amazon Aurora or Amazon RDS.
DynamoDB handles high-throughput NoSQL workloads with single-digit millisecond latency, while Aurora/RDS provides transactional consistency for relational metadata.
2
Evaluate the encryption and cross-account access requirements for database replicas.
The database must use a Customer Managed Key (CMK) because the default AWS-managed key ('aws/rds') cannot be shared or delegated to another AWS account. The compliance team must query replica nodes.
AWS-managed keys do not allow policy modifications to grant cross-account access, which is required for the compliance team's account to decrypt and query the replicas.
3
Assess the disaster recovery and replica access requirements.
Aurora PostgreSQL DB clusters support multi-AZ deployments with read replicas that can be queried and handle failover within seconds (meeting the 15 minute15\text{ minute} RTO and 5 minute5\text{ minute} RPO). RDS standby instances cannot be read from.
Amazon RDS Multi-AZ standby instances do not serve read traffic. Only Aurora Replicas or RDS Read Replicas support reading.

Anahtar Kavram

Designing a hybrid storage strategy separating NoSQL and OLTP workloads while addressing cross-account KMS key sharing and read replica routing limits.
Bu soruyu puanla

Konular

Database and Storage Strategy

Bu konudan daha fazla soru