Examkin

Soru

Zorluk: OrtaAWS Elastic Disaster Recovery

A SysOps Administrator is setting up cross-Region disaster recovery using AWS Elastic Disaster Recovery (AWS DRS) to replicate critical Amazon EC2 workloads from Region A to Region B. The replication traffic must remain entirely within the AWS network and must not travel over the public internet. Additionally, when a disaster recovery drill is executed, the newly launched recovery instances must be automatically deployed into specific target subnets with the correct security groups. Which TWO configurations should the SysOps Administrator perform to meet these requirements? (Select TWO.)

  1. Create interface VPC endpoints (AWS PrivateLink) for AWS DRS in the replication VPC in Region B, and configure replication to use private IP addresses.Cevap
  2. Configure the launch settings for the source servers in the AWS DRS console to define the target subnets, security groups, and instance types for the recovery instances.Cevap
  3. C
    Configure an Amazon Route 53 active-passive failover routing policy that routes client traffic directly to the IP addresses of the staging area instances in Region B.
  4. D
    Create a Gateway VPC Endpoint for AWS DRS in Region B and associate it with the route tables of the staging subnets to route replication traffic privately.
  5. E
    Attach an IAM policy with the iam:PassRole permission to the IAM role associated with the replication agent on the source instances in Region A.

Cevap

Create interface VPC endpoints (AWS PrivateLink) for AWS DRS in the replication VPC in Region B, and configure replication to use private IP addresses. Also, configure the launch settings for the source servers in the AWS DRS console to define the target subnets, security groups, and instance types for the recovery instances.
The correct options are to create interface VPC endpoints (AWS PrivateLink) for AWS DRS in the target Region B to keep replication traffic private, and to configure the target subnets, security groups, and instance types in the launch settings for the source servers in the AWS DRS console.

Adım Adım Çözüm

1
Configure private connectivity for replication.
Interface VPC endpoints (AWS PrivateLink) for the AWS DRS service are created in the replication VPC in Region B, allowing the replication traffic to remain on the private AWS network.
Traffic must not travel over the public internet, and interface endpoints provide private access to AWS DRS.
2
Configure the launch settings in the AWS DRS console.
The target subnet, security groups, and instance types are defined in the launch settings (which updates the underlying EC2 launch templates) for each source server.
This ensures that when a recovery or drill instance is launched, it is deployed with the correct network and security configurations in the target VPC.

Anahtar Kavram

AWS Elastic Disaster Recovery (AWS DRS) private replication configuration and launch settings customization.
Bu soruyu puanla

Konular

AWS Elastic Disaster Recovery

Bu konudan daha fazla soru