A utilities billing database runs Multi-AZ RDS, but the city has never practiced failover and has no tested runbooks. What continuity gap should architects close first?
Select an answer to reveal the explanation.
Short Explanation
Multi-AZ without a drill is a fire extinguisher still sealed in plastic. Write the failover play, pull the pin on purpose, and prove apps reconnect before the real outage does it for you.
Full Explanation
High availability features such as Multi-AZ do not constitute a continuity program until failover processes are documented and tested, including application behavior and validation steps. Removing Multi-AZ, skipping drills, or disabling backups based on misunderstandings of Multi-AZ replication weakens continuity rather than improving it.