ISC2 Certified Cloud Security Professional (CCSP) Practice Question

A cross-region read replica uses asynchronous streaming replication that typically keeps lag to seconds, so at failover the amount of potential data loss is well under the 15-minute RPO. Promoting the replica to primary and redirecting applications can usually be completed within the 4-hour RTO. Ongoing cost is limited to the replica instance and inter-region traffic.

Daily snapshots stored in Glacier have almost no run-time cost, but restoring and launching a new instance can take many hours and the most recent snapshot could be almost a day old, violating both RTO and RPO.

Aurora multi-master in one region increases availability inside that region but provides no protection if the entire region fails, so neither objective can be met.

A fully synchronous multi-region cluster virtually eliminates data loss and offers very fast recovery, but constant two-phase commit traffic and additional nodes make it far more expensive than required, conflicting with the mandate to minimize cost.