ISC2 Certified Cloud Security Professional (CCSP) Practice Question

Because the business can tolerate only 5 minutes of downtime and almost no data loss, workloads must be running in more than one location and data must be synchronously copied. An active-active deployment that keeps identical application instances online in both data-center halls and uses a traffic-management service to automatically redirect clients satisfies the near-zero RPO (thanks to synchronous replication) and the 5-minute RTO (failover is automatic and nearly instantaneous). It also avoids additional licensing or infrastructure in a third site.

− An active-passive cold-standby design meets neither the RTO (because VMs must be instantiated) nor the RPO (because snapshots are asynchronous). − A single-instance design with RAID and weekly backups cannot achieve either metric and represents a single point of failure. − Spanning three geographically distant sites increases licensing and network complexity that the scenario seeks to avoid and can introduce latency that complicates synchronous replication.