A regional emergency-management organization runs workloads across multiple Availability Zones but terminates all Direct Connect virtual interfaces on a single path lacking diversity. What should a resilience review recommend?
Select an answer to reveal the explanation.
Short Explanation
Multi-AZ apps with one skinny Direct Connect straw still choke when that straw breaks. Spread DX locations or connections so hybrid ingress matches the resilience you built in the Region. AZ diversity in compute does not magically duplicate your circuit.
Full Explanation
A regional emergency-management organization that spreads compute across multiple Availability Zones still fails hybrid resilience if every Direct Connect virtual interface terminates on a single undiversified path. Multi-AZ workloads inside AWS do not create diversity on the on-premises circuit, device, or DX location. A resilience review should diversify hybrid connectivity across separate Direct Connect locations or connections and align on-premises routing so loss of one path does not isolate the multi-AZ estate from emergency partners and data centers.
Keeping all virtual interfaces on one connection because multi-AZ compute “already guarantees hybrid path diversity” confuses AZ redundancy with circuit redundancy; the hybrid underlay remains a single point of failure. Removing Direct Connect entirely and relying on ephemeral public IP allow lists during disasters weakens private connectivity and operational readiness when emergencies demand predictable access. Collapsing all workloads into one Availability Zone to match the single DX path worsens availability instead of fixing hybrid diversity.
Exam caveat: SAP-C02 resilience questions often require DX location diversity or DX plus VPN; multi-AZ alone never diversifies a lone hybrid pipe. Operational check: map each VIF to distinct DX connections/locations where possible, test failover by shutting one path, confirm BGP withdrawal and convergence to the alternate path, and document RTO impact for emergency-management applications that depend on on-premises reachability.