Examkin

Soru

Zorluk: OrtaBackup and Restore Management

A SysOps Administrator is configuring a backup and disaster recovery architecture for a business-critical application. The application stores uploaded documents in an Amazon S3 bucket and utilizes an Amazon RDS for PostgreSQL database. To meet reliability and compliance requirements:

1. S3 bucket data must be replicated to a destination bucket in a different AWS Region.
2. The database must support automatic failover with zero manual intervention to mitigate Availability Zone outages in the primary Region.
3. Access to the replicated S3 bucket must go through a private network path within the AWS VPC without traversing the public internet.

The administrator initiates S3 cross-Region replication and configures an RDS Read Replica. However, during testing, replication of new S3 objects fails, database failover is not automatic during an outage, and S3 traffic continues over the public internet.

Which combination of configuration changes will resolve these issues?

  1. Enable versioning on both the source and destination S3 buckets. Modify the database to use a Multi-AZ deployment. Create an S3 Gateway VPC Endpoint and associate it with the subnet route tables.Cevap
  2. B
    Enable versioning on the source S3 bucket only. Modify the database to use a Multi-AZ deployment. Create an S3 Gateway VPC Endpoint and associate it with the subnet route tables.
  3. C
    Enable versioning on both the source and destination S3 buckets. Maintain the RDS Read Replica and configure application-level scripting to promote it during an outage. Create an S3 Gateway VPC Endpoint and associate it with the subnet route tables.
  4. D
    Enable versioning on both the source and destination S3 buckets. Modify the database to use a Multi-AZ deployment. Create an S3 Gateway VPC Endpoint but do not associate it with the subnet route tables.

Cevap

The configuration that enables versioning on both the source and destination S3 buckets, modifies the database to use a Multi-AZ deployment, and creates an S3 Gateway VPC Endpoint associated with the subnet route tables.
The correct configuration requires enabling versioning on both the source and destination S3 buckets to support Cross-Region Replication, converting the database to a Multi-AZ deployment to enable automated database failover, and creating an S3 Gateway VPC Endpoint associated with the subnet route tables to route traffic to S3 privately. This addresses all three requirements of replication, automatic failover, and private networking.

Adım Adım Çözüm

1
Identify the requirements for Amazon S3 Cross-Region Replication (CRR).
Determine that bucket versioning must be enabled on both the source and destination S3 buckets.
AWS S3 CRR requires versioning to track and replicate object versions across Regions.
2
Evaluate the database failover requirement to mitigate Availability Zone outages automatically.
Determine that a Multi-AZ deployment is required, whereas Read Replicas are for scaling read traffic and do not support automated failover without custom scripting.
RDS Multi-AZ provides synchronous replication to a standby instance in another Availability Zone with automated DNS failover during outages.
3
Analyze the networking path required to access S3 privately from within the VPC.
Determine that an S3 Gateway VPC Endpoint must be created and explicitly associated with the subnet route tables.
Creating the gateway endpoint is not enough; without route table association, traffic destined for S3 will continue to route via the internet gateway.

Anahtar Kavram

Multi-component backup, recovery, and access configuration in AWS, including S3 Cross-Region Replication, RDS Multi-AZ failover, and Gateway VPC Endpoint routing.
Tahmini Süre:1m 30s
Bu soruyu puanla

Konular

Backup and Restore Management

Bu konudan daha fazla soru