Examkin

Soru

Zorluk: OrtaEnhancing Reliability and Disaster Recovery

A financial transaction processing platform runs in the us-west-2 Region. The architecture consists of Amazon EC2 instances in private subnets that route outbound internet traffic through a single NAT Gateway in a public subnet to communicate with external payment gateways. The backend database is a single-region Amazon Aurora PostgreSQL Serverless v2 database cluster. Internal microservices resolve dependencies using a Route 53 Private Hosted Zone (PHZ) associated with the primary VPC.

The solutions architect must enhance the reliability of the current architecture and establish a disaster recovery (DR) solution in the us-east-1 Region with a target Recovery Time Objective (RTO) of 15 minutes and Recovery Point Objective (RPO) of 1 minute.

Which combination of steps should the solutions architect recommend to meet these objectives? (Select TWO.)

  1. Convert the database cluster to an Amazon Aurora Global Database with a secondary cluster in the secondary Region, and use Amazon Route 53 Application Recovery Controller (Route 53 ARC) routing controls to initiate failover and promote the secondary cluster.Cevap
  2. Deploy a NAT Gateway in each Availability Zone in the primary VPC, and update the route tables of each private subnet to direct outbound internet traffic to the local NAT Gateway in its respective zone.Cevap
  3. C
    Configure AWS Backup to take hourly snapshots of the Aurora database, replicate the snapshots to the secondary Region, and restore the database to a new cluster during a failover event.
  4. D
    Establish an AWS Transit Gateway between the primary and secondary regions, and update the private subnet route tables in the primary VPC to route all outbound internet traffic through a single NAT Gateway in the secondary Region's VPC.
  5. E
    Create a new duplicate Route 53 Private Hosted Zone with the same domain name in the secondary Region, and rely on VPC peering between the primary and secondary VPCs to propagate DNS queries without modifying hosted zone VPC associations.

Cevap

The correct steps are to convert the database cluster to an Aurora Global Database with a secondary cluster in the secondary Region while utilizing Route 53 Application Recovery Controller for failover, and to deploy a NAT Gateway in each Availability Zone in the primary VPC for high availability.
To meet the 1-minute RPO, a replication mechanism with sub-second or near-zero latency is required. Converting the Aurora database to an Aurora Global Database provides sub-second cross-region replication. Combined with Route 53 ARC, it allows for failover coordination under 15 minutes RTO. Additionally, deploying a NAT Gateway in each Availability Zone in the primary VPC eliminates the single point of failure in the outbound internet access path, enhancing the reliability of the existing workload.

Adım Adım Çözüm

1
Analyze the disaster recovery target parameters (RTO of 15 minutes and RPO of 1 minute).
Identify that data replication must be near-continuous, and restoration from periodic backups is insufficient.
An RPO of 1 minute requires sub-minute data replication capabilities, which are natively supported by Amazon Aurora Global Databases.
2
Evaluate the database replication and failover design.
Establish Aurora Global Database replication to the secondary Region and configure Route 53 ARC to orchestrate failover.
Route 53 ARC routing controls ensure reliable, automated or manual failover within the 15-minute RTO constraint.
3
Analyze the primary region outbound networking design.
Replace the single NAT Gateway with multi-AZ NAT Gateways, updating private subnet routing tables to use local gateways.
This eliminates a single point of failure in the outbound connection path, which is critical for enhancing overall application reliability.

Anahtar Kavram

Disaster Recovery pattern alignment based on RTO/RPO requirements, and enhancing single-region reliability by eliminating single points of failure in outbound network paths.
Bu soruyu puanla

Konular

Enhancing Reliability and Disaster Recovery