Examkin

Soru

Zorluk: OrtaHigh Availability and Disaster Recovery Design

A retail company is designing a disaster recovery (DR) and high availability architecture for its inventory management application. The primary environment runs in the eu-west-1 Region, and the DR environment will be deployed in the eu-central-1 Region. The application uses Amazon Aurora MySQL for database storage. The business requirements specify a Recovery Time Objective (RTO) of 15 minutes and a Recovery Point Objective (RPO) of 5 minutes. The application instances in both VPCs need to resolve internal endpoints using a Route 53 private hosted zone named inventory.internal. Additionally, application instances in the active Region must maintain redundant, highly available outbound internet connectivity to communicate with external supplier APIs, even during an Availability Zone outage. Which configuration meets these requirements with the least administrative complexity?

  1. A
    Configure an Amazon Aurora Global Database with the primary cluster in eu-west-1 and a secondary cluster in eu-central-1. Associate the inventory.internal private hosted zone with the VPCs in both Regions. In each VPC, deploy a single NAT Gateway in one Availability Zone, routing outbound internet traffic from all private subnets across all Availability Zones to this single NAT Gateway.
  2. B
    Configure an Amazon Aurora Global Database with the primary cluster in eu-west-1 and a secondary cluster in eu-central-1. Create the inventory.internal private hosted zone in eu-west-1 and rely on a Route 53 public resolver to resolve the endpoints from eu-central-1. In each VPC, deploy a NAT Gateway in each Availability Zone and update the route tables accordingly.
  3. Configure an Amazon Aurora Global Database with the primary cluster in eu-west-1 and a secondary cluster in eu-central-1. Associate the inventory.internal private hosted zone with the VPCs in both Regions. In each VPC, deploy a NAT Gateway in each Availability Zone and update the route tables to route outbound internet traffic through the local NAT Gateway in the respective zone.Cevap
  4. D
    Set up daily Amazon Aurora snapshots in eu-west-1, copy them to eu-central-1 every 4 hours, and restore them in the event of a disaster. Associate the inventory.internal private hosted zone with the VPCs in both Regions. In each VPC, deploy a single NAT Gateway in one Availability Zone to route outbound internet traffic.

Cevap

Configure an Amazon Aurora Global Database with the primary cluster in eu-west-1 and a secondary cluster in eu-central-1. Associate the inventory.internal private hosted zone with the VPCs in both Regions. In each VPC, deploy a NAT Gateway in each Availability Zone and update the route tables to route outbound internet traffic through the local NAT Gateway in the respective zone.
The correct configuration implements Amazon Aurora Global Database to achieve low-latency cross-Region replication that easily satisfies the 5-minute RPO. It associates the private hosted zone with both VPCs to enable seamless private DNS resolution in both regions, and deploys multiple NAT Gateways (one per Availability Zone) to ensure that outbound internet connectivity to supplier APIs survives an Availability Zone outage.

Adım Adım Çözüm

1
Evaluate the database replication strategy against RTO and RPO requirements.
Amazon Aurora Global Database provides asynchronous replication with typical latency of less than 1 second, fulfilling the 5-minute RPO requirement. Snapshot-based solutions fail this limit.
Choosing the appropriate database tier replication is critical to meeting strict recovery objectives.
2
Configure DNS resolution for the private domain.
Associate the Route 53 private hosted zone with the VPCs in both the primary and recovery Regions.
VPCs must be explicitly associated with a private hosted zone to resolve its DNS records.
3
Architect the NAT Gateway topology for outbound connectivity.
Deploy one NAT Gateway per Availability Zone in each VPC and update route tables to use the zone-local NAT Gateway.
This configuration guarantees that an outage in a single Availability Zone does not impact outbound internet traffic in the remaining zones.

Anahtar Kavram

Multi-region disaster recovery replication combined with private DNS VPC association and highly available NAT Gateway architectures.
Bu soruyu puanla

Konular

High Availability and Disaster Recovery Design

Bu konudan daha fazla soru