Examkin

Soru

Zorluk: ZorHigh Availability and Disaster Recovery Design

An automated smart warehouse fulfillment system orchestrates robotic picking paths across multiple physical distribution centers. The coordination engine runs on Amazon EC2 instances in an Auto Scaling group behind an Application Load Balancer (ALB) in the primary AWS Region. The application tier writes state data to an Amazon Aurora PostgreSQL database and requires outbound internet connectivity to send API commands to the physical warehouses. The solutions architect must design a multi-region disaster recovery (DR) solution with a Recovery Time Objective (RTO) of 15 minutes and a Recovery Point Objective (RPO) of 1 minute. The design must ensure that outbound connectivity is resilient to Availability Zone (AZ) failures in both regions and minimize administrative overhead during failover. Which combination of actions should the solutions architect recommend to meet these requirements? (Select TWO.)

  1. Deploy Amazon Aurora Global Database, designating the primary region as the writer and the standby region as a read replica. Configure Route 53 Failover routing records pointing to the Application Load Balancer in each region, and associate the primary record with a Route 53 health check that monitors the primary region's application health.Cevap
  2. Deploy a NAT Gateway in each Availability Zone of the public subnets in both the primary and standby regions. Configure the route tables of the private subnets in each Availability Zone to route outbound internet traffic through the NAT Gateway located in that same zone.Cevap
  3. C
    Deploy a single NAT Gateway in the primary Availability Zone of each region's public subnets. Configure all private subnets across all Availability Zones in both regions to route outbound internet traffic through this single NAT Gateway.
  4. D
    Configure Amazon Aurora Auto Scaling in the standby region to dynamically scale replica instances to handle the primary write workload during failover, and configure Route 53 Latency-based routing to direct write requests directly to the reader endpoints in the standby region.
  5. E
    Configure a Route 53 Private Hosted Zone (PHZ) in the primary account and associate it with the VPC in the standby region. Use Route 53 Geolocation routing policies to route regional internal service requests to the standby database endpoints during a failover event.

Cevap

The correct options are deploying Amazon Aurora Global Database along with Route 53 Failover routing records, and deploying a NAT Gateway in each Availability Zone within both regions' public subnets.
To satisfy the RPO of 1 minute and RTO of 15 minutes, deploying Amazon Aurora Global Database is required as it replicates transactions within seconds. Combining this with Route 53 Failover routing records linked to a health check ensures that client requests are dynamically redirected to the standby region without manual DNS intervention. To ensure outbound connectivity is resilient against Availability Zone failures, a NAT Gateway must be deployed in every Availability Zone within the public subnets of both regions. This setup keeps the outbound paths isolated per zone and prevents a single AZ outage from interrupting outbound internet traffic from other healthy zones.

Adım Adım Çözüm

1
Evaluate the database replication strategy to satisfy the RPO constraint.
Select Amazon Aurora Global Database, which offers sub-second cross-region replication, fitting the RPO requirement of 1 minute.
Traditional backup-and-restore or manual cross-region snapshot copying cannot consistently meet a 1-minute RPO with low operational overhead.
2
Establish an automated DNS failover mechanism.
Create Route 53 Failover routing records pointing to the respective Application Load Balancers in the primary and standby regions, and attach a health check to the primary record.
This automatically redirects user and automation traffic to the disaster recovery region's ALB when the primary region is unhealthy, keeping RTO under 15 minutes.
3
Ensure outbound connectivity is highly available and zone-resilient in both regions.
Provision a NAT Gateway in each Availability Zone in both regions and configure corresponding route tables to point outbound traffic to the zone-local NAT Gateway.
A single NAT Gateway in a region is a single point of failure. Deploying one per AZ prevents an AZ outage from causing a complete outbound internet black-out for resources in other zones.

Anahtar Kavram

Designing multi-region disaster recovery for transactional database workloads requires high-speed replication like Amazon Aurora Global Database combined with automated DNS-level failover. Outbound traffic paths must be built with zone-redundant NAT Gateways to avoid single points of failure.
Bu soruyu puanla

Konular

High Availability and Disaster Recovery Design

Bu konudan daha fazla soru