DOP-C02 · Question #217
DOP-C02 Question #217: Real Exam Question with Answer & Explanation
The correct answer is B: Copy the CloudFormation templates to an Amazon S3 bucket in the DR Region. Configure Aurora. Explanation Option B is correct because it copies CloudFormation templates to an S3 bucket in the DR Region, configures Aurora Global Database for cross-region replication (meeting the 8-hour RPO), and replicates the ECR images to the DR Region - this is critical since building D
Question
A company runs a web application that extends across multiple Availability Zones. The company uses an Application Load Balancer (ALB) for routing, AWS Fargate for the application, and Amazon Aurora for the application data. The company uses AWS CloudFormation templates to deploy the application. The company stores all Docker images in an Amazon Elastic Container Registry (Amazon ECR) repository in the same AWS account and AWS Region. A DevOps engineer needs to establish a disaster recovery (DR) process in another Region. The solution must meet an RPO of 8 hours and an RTO of 2 hours. The company sometimes needs more than 2 hours to build the Docker images from the Dockerfile. Which solution will meet the RTO and RPO requirements MOST cost-effectively?
Options
- ACopy the CloudFormation templates and the Dockerfile to an Amazon S3 bucket in the DR
- BCopy the CloudFormation templates to an Amazon S3 bucket in the DR Region. Configure Aurora
- CCopy the CloudFormation templates to an Amazon S3 bucket in the DR Region. Use Amazon
- DCopy the CloudFormation templates to an Amazon S3 bucket in the DR Region. Deploy a second
Explanation
Explanation
Option B is correct because it copies CloudFormation templates to an S3 bucket in the DR Region, configures Aurora Global Database for cross-region replication (meeting the 8-hour RPO), and replicates the ECR images to the DR Region - this is critical since building Docker images from Dockerfile can take more than 2 hours, which would violate the RTO of 2 hours if images weren't pre-replicated.
Why the distractors are wrong:
- Option A copies only the Dockerfile (not the pre-built images) to S3, meaning images must still be built during a DR event, which exceeds the 2-hour RTO - this was explicitly identified as a risk in the question.
- Option C likely involves a "warm standby" or over-engineered approach (such as running active resources in the DR Region at full scale), making it more expensive than necessary for the stated RPO/RTO requirements.
- Option D deploys a second full active environment ("pilot light" turned fully on or active-active), which exceeds cost-effectiveness requirements when the RPO/RTO thresholds don't demand it.
Memory Tip 🧠
"Pre-bake, don't re-bake" - whenever a question mentions that image builds take longer than the RTO, always ensure container images are pre-replicated (ECR replication), not rebuilt from source during a DR event. Pair this with Aurora Global Database for data replication within RPO windows.
Topics
Community Discussion
No community discussion yet for this question.