Q71 — AWS SAP-C02 Ch.3

Question 71 of 75 | ← Chapter 3

Q296. A company needs to build a disaster recovery (DR) solution for its ecommerce website. The web application is hosted on a fleet of t3.large Amazon EC2 instances and uses an Amazon RDS for MySQL DB instance. The EC2 instances are in an Auto Scaling group that extends across multiple Availability Zones.In the event of a disaster, the web application must fail over to the secondary environment with an RPO of 30 seconds and an RTO of 10 minutes.Which solution will meet these requirements MOST cost-effectively?

• A. Use infrastructure as code (laC) to provision the new infrastructure in the DR Region. Create a cross- Region read replica for the DB instance. Set up a backup plan in AWS Backup to create cross-Region backups for the EC2 instances and the DB instance. Create a cron expression to back up the EC2 instances and the DB instance every 30 seconds to the DR Region. Recover the EC2 instances from the latest EC2 backup. Use an Amazon Route 53 geolocation routing policy to automatically fail over to the DR Region in the event of a disaster.
• B. Use infrastructure as code (laC) to provision the new infrastructure in the DR Region. Create a cross- Region read replica for the DBinstance. Set up AWS Elastic Disaster Recovery (CloudEndure Disaster Recovery) to continuously replicate the EC2 instances to the DR Region. Run the EC2 instances at the minimum capacity in the DR Region. Use an Amazon Route 53 failover routing policy to automatically fail over to the DR Region in the event of a disaster. Increase the desired capacity of the Auto Scaling group ✓
• C. Set up a backup plan in AWS Backup to create cross-Region backups forthe EC2 instances and the DB instance. Create a cron expression to back up the EC2 instances and the DB instance every 30 seconds to the DR Region. Use infrastructure as code (laC) to provision the new infrastructure in the DR Region. Manually restore the backed-up data on new instances. Use an Amazon Route 53 simple routing policy to automatically fail over to the DR Region in the event of a disaster
• D. Use infrastructure as code (laC) to provision the new infrastructure in the DR Region. Create an Amazon Aurora global database. Set up AWS Elastic Disaster Recovery (CloudEndure Disaster Recovery) to continuously replicate the EC2 instances to the DR Region. Run the Auto Scaling group of EC2 instances at full capacity in the DR Region. Use an Amazon Route 53 failover routing policy to automatically fail over to the DR Region in the event of a disaster

Correct Answer: B. Use infrastructure as code (laC) to provision the new infrastructure in the DR Region. Create a cross- Region read replica for the DBinstance. Set up AWS Elastic Disaster Recovery (CloudEndure Disaster Recovery) to continuously replicate the EC2 instances to the DR Region. Run the EC2 instances at the minimum capacity in the DR Region. Use an Amazon Route 53 failover routing policy to automatically fail over to the DR Region in the event of a disaster. Increase the desired capacity of the Auto Scaling group

Explanation

To build a cost-effective disaster recovery (DR) solution for an ecommerce website with an RPO of 30 seconds and an RTO of 10 minutes, the solution should use infrastructure as code (IaC), cross-region backups, and an Amazon Route 53 failover routing policy. Therefore, the correct option is:B.Step B provisions the new infrastructure in the DR Region using IaC and creates a cross-Region read replica for the MySQL DB instance. AWS Elastic Disaster Recovery (CloudEndure Disaster Recovery) is set up to continuously replicate the EC2 instances to the DR Region. The EC2 instances are run at the minimum capacity in the DR Region to reduce costs. An Amazon Route 53 failover routing policy is used to automatically failover to the DR Region in the event of a disaster, with the desired capacity of the Auto Scaling group increased.Option A is incorrect because although it does set up cross-region backups and uses IaC, it relies on cron expressions to back up the EC2 instances and the MySQL DB instance, which may be insufficient for meeting the RPO and RTO requirements. Additionally, geolocation routing policies are not suitable for DR scenarios because they do not immediately redirect traffic to the DR Region in case of a disaster.Option C is incorrect because it requires manual restoration of backed-up data on new instances, which does not meet the RPO and RTO requirements. The Amazon Route 53 simple routing policy also does not provide automatic failover capabilities.Option D is incorrect because although creating an Amazon Aurora global database is a cost-effective way to replicate data globally, it is not necessary for meeting the RPO and RTO requirements of this scenario. Additionally, running the Auto Scaling group at full capacity in the DR Region may be expensive and inefficient. Q297.An entertainment company recently launched a new game.To ensure a good experience for players during the launch period, the company deployed a static quantity of 12 r6g.16xlarge (memory optimized) Amazon EC2 instances behind a Network Load Balancer. The company's operations team used the Amazon CloudWatch agent and a custom metric to include memory utilization in its monitoring strategy Analysis of the CloudWatch metrics from the launch period showed consumption at about one quarter of the CPU and memory that the company expected. Initial demand for the game has subsided and has become more variable. The company decides to use an Auto Scaling group that monitors the CPU and memory consumption to dynamically scale the instance fleet. A solutions architect needs to configure the Auto Scaling group to meet demand in the most cost-effective way.Which solution will meet these requirements?A.Configure the Auto Scaling group to deploy c6g.4xlarge (compute optimized) instances. Configure a minimum capacity of 3, a desired capacity of 3, and a maximum capacity of 12B.Configure the Auto Scaling group to deploy m6g.4xlarge (general purpose) instances. Configure a minimum capacityof 3, a desired capacity of 3, and a maximum capacity of 12C.Configure the Auto Scaling group to deploy r6g.4xlarge (memory optimized) instances. Configure a minimum capacityof 3, a desired capacity of 3, and a maximum capacity of 12D.Configure the Auto Scaling group to deploy r6g.8xlarge (memory optimized) instances. Configure a minimum capacityof 2, a desired capacity of 2,and a maximum capacity of 6Answer:Cbecause it uses r6g.4xlarge instances, which are less expensive than r6g.16xlarge instances. Additionally, the Auto Scaling group is configured with a minimum capacity of 3, a desired capacity of 3, and a maximum capacity of 12, allowing for flexibility in scaling based on demand. This ensures that the company can meet variable demand while optimizing costs. Q298. A company wants to use Amazon WorkSpaces in combination with the client devices to replace aging desktops.Employees use the desktops to access applications that work with clinical trial data. Corporate security policy states that access to the applications must be restricted to only company branch office locations. The company is considering adding an additional branch in the next 6 months. Which solution meets these requirements with the Most operational efficiency? A. Create an IP access control group rule with the list of public addresses from the branch offices.Associate the IP access control group with the WorkSpaces directory.B. Use AWS Firewall Manager to create a web ACL rule with an IPSET with the list of public addresses from the branch office locations.Associate the web ACL with the WorkSpaces directory.C. USE AWS Certificate Manager (ACM) to issue trusted device certificates to the machine deployed in the branch office locations.Enable restricted access on the WorkSpaces directory.D. Create a custom WorkSpaces image with Windows Firewall configured to restrict configured access to the public address of the branch offices.Use the image to deploy the Workspace.答案:A