A company is migrating a critical MySQL database to Amazon Aurora MySQL. The database handles high-volume financial transactions. The architecture must ensure zero data loss (RPO = 0) in the event of an Availability Zone failure, and minimal downtime (RTO < 1 minute). The application must securely authenticate to the database without hardcoding credentials. Which combination of features should be used? (Select TWO)

Q: A company is migrating a critical MySQL database to Amazon Aurora MySQL. The database handles high-volume financial transactions. The architecture must ensure zero data loss (RPO = 0) in the event of an Availability Zone failure, and minimal downtime (RTO < 1 minute). The application must securely authenticate to the database without hardcoding credentials. Which combination of features should be used? (Select TWO)

Select the native Aurora HA feature and the most secure authentication method.

Q: What mistakes do candidates make on this AWS SAP-C02 question?

Selecting Secrets Manager when IAM authentication is an option, or confusing Aurora's regional HA with Global Database.

Answer options:

Deploy an Amazon Aurora Multi-AZ cluster.

Use AWS IAM database authentication for the application to connect to Aurora.

Deploy Amazon RDS for MySQL with Multi-AZ and synchronous replication.

Use AWS Secrets Manager to rotate the database credentials every hour.

Configure Aurora Global Database with synchronous cross-region replication.

Use Amazon ElastiCache for Redis to cache transactions before writing to Aurora.

How to approach this question

Select the native Aurora HA feature and the most secure authentication method.

Full Answer

Deploy an Amazon Aurora Multi-AZ cluster., Use AWS IAM database authentication for the application to connect to Aurora.

Amazon Aurora automatically maintains 6 copies of your data across 3 Availability Zones, providing synchronous replication and RPO=0 for AZ failures. Failover is automatic and typically completes in under a minute. For secure authentication without hardcoded credentials, AWS IAM database authentication uses short-lived authentication tokens instead of passwords.

Common mistakes

Selecting Secrets Manager when IAM authentication is an option, or confusing Aurora's regional HA with Global Database.

Question 19 All questions Question 21

Practice the full AWS Solutions Architect Professional SAP-C02 Practice Exam 5

75 questions · hints · full answers · grading

How to approach this question

Full Answer

Common mistakes

Practice the full AWS Solutions Architect Professional SAP-C02 Practice Exam 5

More questions from this exam