Question

A retail company runs its e-commerce platform on Azure and is designing a resiliency strategy aligned with the Well-Architected Framework (WAF) and the Cloud Adoption Framework (CAF). Business leadership requires that a regional Azure outage or a ransomware event affecting the primary region must not cause loss of committed customer orders, and the platform must remain operational with an RPO of near-zero and an RTO of minutes. The security architect must balance the WAF Reliability and Security pillars while avoiding a design that a single compromised regional control plane could fully corrupt. Which design approach BEST satisfies these requirements?

Accepted Answer

Deploy an active-active multi-region architecture with zone-redundant services, synchronous-tier data replication for committed transactions, independently scoped identity and backup control planes per region, and immutable, isolated backups.

Answer

Deploy the platform to a single region using availability zones, and rely on geo-redundant storage (GRS) with periodic snapshots for recovery after a regional failure.

Answer

Deploy an active-passive multi-region design where the secondary region shares the same subscription, identity tenant admin credentials, and backup vault as the primary to simplify failover automation.

Answer

Increase virtual machine SKUs and enable Azure Backup daily in the primary region only, accepting a 24-hour RPO as the cost-optimized tradeoff.