DR + AWS Backup — RTO/RPO and centralized backup policies

15 timed scenario questions (~24 min, ~96 sec each). Reinforces night-19-dr-aws-backup.md and night-19-lab-backup-setup scripts. Answer without peeking at night-19-quiz-answers.json first.

1. 1.After a bad deploy, GSA wiki counters are wrong. Leadership says losing more than 30 minutes of view data is unacceptable. Which metric are they defining?

   A.RPO — maximum acceptable data loss measured in timeB.RTO — maximum acceptable downtime before service returns onlineC.MTTR — mean time to repair the Lambda deployment package fullyD.TTL — DynamoDB item expiration window for stale wiki page rows

2. 2.us-east-1 fails. Executives require the public wiki back online within 15 minutes. Which metric drives the architecture choice?

   A.RPO — how much wiki data can be missing after failover completesB.RTO — maximum acceptable outage before users can read wiki pagesC.Backup vault retention — days recovery points stay in the vaultD.ACU floor — minimum Aurora capacity reserved during a disaster

3. 3.A startup accepts hours of downtime after a Region failure but wants the lowest monthly DR cost. Which strategy fits?

   A.Multi-site active-active with DynamoDB global tables in three RegionsB.Warm standby with Route 53 failover to a running ASG min=2 in DR for this workloadC.Backup and restore — AWS Backup recovery points plus IaC redeploy in DRD.Pilot light with Aurora Global Database primary in both Regions for this workload

4. 4.Compare pilot light and warm standby for the same RPO target. Which statement is correct?

   A.Pilot light keeps full production ASG capacity running in DR always for this workloadB.Warm standby never runs database instances until failover is declaredC.Pilot light and warm standby share identical RTO using Backup only for this workloadD.Warm standby runs a scaled-down live DR stack — lower RTO than pilot light

5. 5.Compliance wants one nightly retention policy for DynamoDB wiki tables, Aurora resort_stats, and EBS volumes. Which approach?

   A.AWS Backup plan with tag-based selection across those resource typesB.Enable DynamoDB PITR only — it backs up all account resources nightlyC.Extend RDS automated backup window to cover EBS and DynamoDB tooD.CloudTrail data events on PutItem and INSERT for 90-day replay for this workload

6. 6.night-19-lab tags saa-study-gsa-wiki-views with saa-study-backup=night-19 instead of listing the table ARN in the plan. Why?

   A.DynamoDB tables cannot be backed up by ARN — tags are mandatory alwaysB.New resources with the same tag auto-enroll without editing the backup planC.Tags disable PITR so AWS Backup becomes the only restore path left for this workloadD.Tag keys must match the backup vault name or jobs fail IAM checks for this workload

7. 7.Aurora resort_stats needs sub-second cross-Region RPO with a managed global primary/secondary topology. Best fit?

   A.Promote a read replica in eu-west-1 after us-east-1 outage completes for this workloadB.RDS Multi-AZ synchronous standby limited to the same Region only for this workloadC.Aurora Global Database with primary in us-east-1 and secondary in eu-west-1D.AWS Backup cross-Region copy every five minutes as live replication for this workload

8. 8.An auditor asks whether CloudTrail can replace AWS Backup for wiki tables. What is accurate?

   A.Yes — CloudTrail stores full table snapshots in the trail S3 bucket for this workloadB.Yes — EnableCloudTrail on DynamoDB streams equals PITR plus Backup for this workloadC.Partially — CloudTrail replaces backup if S3 Object Lock is enabled for this workloadD.No — CloudTrail records API activity; it is not a backup and restore service

9. 9.You add a copy action to saa-study-gsa-night19-plan targeting a vault in us-west-2. What crosses Regions?

   A.Recovery points copied on the schedule defined in the backup plan ruleB.Live DynamoDB item replication like global tables active-active writesC.Continuous PITR log streams forwarded to the DR vault in real timeD.CloudFormation stacks that redeploy Lambda and API Gateway automatically

10. 10.A teammate confuses AWS Backup cross-Region copy with DynamoDB global tables. How do they differ?

    A.Global tables copy only manual snapshots; Backup copy handles PITR logs for this workloadB.Backup copy moves periodic recovery points; global tables replicate liveC.Both are identical — AWS Backup implements global tables internallyD.Global tables require AWS Backup vault lock in the destination Region

11. 11.night-19-lab creates saa-study-gsa-backup-vault. What is the vault's primary role?

    A.Run Lambda functions that poll DynamoDB Streams for backup triggers for this workloadB.Route 53 health check target for DR failover routing policy targets for this workloadC.Encrypted container storing backup recovery points with optional vault lockD.IAM boundary that replaces the AWSBackupDefaultServiceRole entirely for this workload

12. 12.Before a risky Aurora schema migration on resort_stats, ops wants a one-off snapshot they control. Best action tonight?

    A.Disable automated backups until the migration completes successfully for this workloadB.Switch the cluster to DynamoDB to avoid relational backup complexity for this workloadC.Enable PITR on the EBS root volume of the Aurora writer instance for this workloadD.Start an on-demand AWS Backup job or manual RDS snapshot before the change

13. 13.night-19-lab-backup-teardown.ps1 runs after the quiz. A teammate worries the wiki study table disappears. What is true?

    A.Teardown removes Backup resources only — Night 18 wiki study table remainsB.Teardown deletes any DynamoDB table tagged saa-study-backup=night-19 for this workloadC.Teardown disables PITR on prod WikiPages in the production account for this workloadD.Teardown drops Night 16 Aurora because backup plans reference the VPC

14. 14.GSA needs near-zero RTO with active writes in us-east-1 and eu-west-1 for DynamoDB wiki pages. Which DR tier?

    A.Backup and restore with weekly recovery points in a second Region for this workloadB.Multi-site active-active — DynamoDB global tables plus regional endpointsC.Pilot light — AMIs only, no database running until declared disasterD.Warm standby — single Region Multi-AZ with read replica for reports for this workload

15. 15.Night 15 enabled Aurora automated backups. Night 19 enrolls the same cluster in AWS Backup by tag. Why keep both concepts straight?

    A.Automated backups must be disabled before any AWS Backup plan can runB.Aurora automated backups only work when DynamoDB PITR is also enabledC.AWS Backup centralizes multi-service retention; native backups stayD.AWS Backup replaces Aurora storage and removes the need for a writer