1Z0-997-25 Question 36
Select 2You manage a high-traffic e-commerce application running in a single OCI region, deployed across multiple Availability Domains. The business requires near-zero data loss (RPO) and minimal downtime (RTO) even in the event of a full region outage. Which two design approaches help you meet these requirements for scalability, high availability, and disaster recovery?
- A
Configure an Active-Passive setup with Oracle Data Guard in synchronous mode between two OCI regions, keeping both databases continuously in sync with minimal latency.
- B
Rely on daily block volume backups to Object Storage within the same region, restoring the application only after the primary region recovers.
- C
Implement a multi-region load balancer that routes client traffic to identical application stacks across two OCI regions in an active-active configuration.
- D
Use only cross-region Object Storage replication for data backups and manually rebuild the database in the standby region during a major outage.
- E
Attach the same set of block volumes across multiple Availability Domains in a single region and rely on local replication to survive a region-wide failure.
Show answer and explanation
Correct answers: A, C
Explanation
High availability and disaster recovery strategies in OCI typically combine a region-level, synchronous replication method for databases (e.g., Data Guard) with multi-region application deployments to maintain service continuity. Leveraging Oracle Data Guard in synchronous mode addresses near-zero RPO, while deploying active-active or active-passive configurations across regions satisfies minimal RTO. Refer to the Oracle Cloud Infrastructure best practices for Disaster Recovery (2025) for recommended approaches to multi-region architectures.
- A. Correct.
Correct. Oracle Data Guard in synchronous mode across two OCI regions ensures database updates are nearly simultaneous, minimizing data loss. This meets stringent RPO requirements since each transaction is committed to both primary and standby databases in real time.
- B. Incorrect.
Incorrect. Taking daily backups within the same region does not protect against a region-wide outage. You would have to wait for the region to become available again or perform a time-consuming restore from backups to another region, failing the minimal downtime requirement.
- C. Correct.
Correct. An active-active design, where two regions each host a live copy of the application, can instantly handle traffic if one region fails. Combined with synchronous data replication, this approach yields minimal downtime and lost transactions.
- D. Incorrect.
Incorrect. Simply replicating Object Storage data does not provide a ready-to-use standby database. Manual rebuilding of the database infrastructure during a major outage would prolong recovery time, failing the rapid RTO objective.
- E. Incorrect.
Incorrect. Attaching block volumes across multiple Availability Domains only protects against AD-specific failures, not a full region outage. If the entire region goes down, these volumes are also unavailable.