Soru

Zorluk: OrtaResilience, High Availability, and Redundancy

An enterprise organization is designing a high-availability infrastructure for its edge network services across two geographically separate data centers. The design requires automatic traffic redirection to the healthy data center if a primary site suffers an outage, while minimizing client browser resolution caching during a failover event. Which of the following mechanisms should the security architect deploy to meet these resilience objectives? (Select TWO.)

  1. Global Server Load Balancing (GSLB) configured with short Time-to-Live (TTL) DNS record valuesCevap
  2. Automated DNS health-check monitoring paired with dynamic failover routing policiesCevap
  3. C
    RAID 10 disk array mirroring configured across the inter-site WAN link
  4. D
    Inline network taps paired with passive intrusion detection system (IDS) logging

Cevap

The correct mechanisms are Global Server Load Balancing (GSLB) configured with short Time-to-Live (TTL) DNS record values, and automated DNS health-check monitoring paired with dynamic failover routing policies.
High-availability edge architecture across multiple data centers relies on Global Server Load Balancing (GSLB) to route traffic to active facilities. Configuring short Time-to-Live (TTL) values prevents client systems and resolvers from caching obsolete IP addresses. Automated health checks work alongside GSLB to detect site outages in real time and automatically re-route incoming connections to healthy infrastructure.

Adım Adım Çözüm

1
Identify the primary requirement for geographic site failover and client caching prevention.
Determined that multi-site traffic routing and DNS cache control are required.
Geographically separate data centers require site-level load distribution and rapid record expiry so clients query healthy nodes promptly.
2
Evaluate high-availability network routing controls.
GSLB with short TTLs and continuous health checks dynamically redirect traffic away from failed sites without client resolution delays.
GSLB evaluates node health dynamically and short TTLs prevent clients from retaining stale IP addresses.
3
Differentiate storage fault tolerance and detective monitoring controls from network resilience controls.
Eliminated RAID 10 drive arrays and passive IDS network taps.
RAID handles local storage drive failures, not site failover; passive IDS monitors network packets without altering or redirecting traffic paths.

Anahtar Kavram

Geographic High Availability and Global Server Load Balancing
Bu soruyu puanla