DOP-C02 Resilient Cloud Solutions Practice Question
Which THREE components are required to implement a global application that can withstand the failure of an entire AWS Region? (Select THREE.)
⚠ Common exam trap
The trap is selecting Regional services (ALB, single-AZ RDS) as if they provide cross-Region resilience — candidates must recognize that only global services (Route 53, CloudFront, DynamoDB Global Tables) or multi-Region replicated services can survive a full Region failure.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Amazon CloudFront with multiple origins and origin failover.
B is correct because Amazon CloudFront with multiple origins and origin failover automatically routes requests to a healthy origin in another Region when the primary origin becomes unavailable, providing a global entry point that survives a full Region failure. C is correct because DynamoDB Global Tables replicate data across Regions in a multi-active configuration, so the application can continue reading and writing to a replica table in a surviving Region. E is correct because Route 53 health checks detect an unhealthy Region endpoint and the failover routing policy then directs DNS queries to the standby Region's endpoint, enabling regional failover. A is not required because an Application Load Balancer is Region-scoped and cannot by itself provide cross-Region resilience; it would only be part of a single-Region design. D is not required because a single-AZ RDS deployment has no cross-Region (or even cross-AZ) redundancy and would not survive a Region failure.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
An Application Load Balancer in the primary Region.
Why it's wrong here
An Application Load Balancer operates within a single AWS Region and its DNS name resolves to nodes in that Region's VPC. It can balance traffic across Availability Zones but has no awareness of or ability to route to other Regions, so a Regional outage leaves clients unable to connect. A global architecture needs a service that can shift traffic to a different Region, which an ALB cannot do on its own.
- ✓
Amazon CloudFront with multiple origins and origin failover.
Why this is correct
Amazon CloudFront is a global content delivery network that terminates connections at edge locations and can be configured with multiple origins, including an origin group where the primary origin's failure triggers automatic failover to a secondary origin. This origin failover is initiated when the primary returns specific HTTP error codes or fails connection attempts, making it a key component for routing requests to a healthy Region. Additionally, edge caching shields the origin and improves performance, which is essential for a globally resilient application.
- ✓
Amazon DynamoDB Global Tables.
Why this is correct
Amazon DynamoDB Global Tables provide fully managed, multi-Region replication that enables active-active access with low-latency reads and writes in multiple Regions. When a table is added to a Global Table, data changes are automatically propagated to all replicated Regions, and the service handles conflict resolution, so the database layer can continue serving traffic during a Regional disruption. This is a critical component because the application's data plane must be present in more than one Region to achieve global high availability.
- ✗
Amazon RDS with a single-AZ deployment.
Why it's wrong here
A single-AZ Amazon RDS deployment places one database instance in a single Availability Zone, providing no automatic failover even if that AZ experiences an outage. Database recovery would require manual intervention and could result in data loss, and the instance is completely unavailable during a Regional failure. Since a global application requires continuous database availability across Regions, a single-AZ RDS instance is the opposite of what is needed.
- ✓
Amazon Route 53 with health checks and failover routing policy.
Why this is correct
Amazon Route 53 is a global authoritative DNS service that can combine health checks with failover routing policies to direct user traffic away from an unhealthy Region to a healthy one. It continuously evaluates the health of web endpoints or other custom checks and, when a failure is detected, automatically changes DNS responses to point to a failover endpoint. This provides the global traffic management layer necessary to shift users to the remaining available Region.
Go deeper
Related to this question
About these practice questions
This DOP-C02 question is part of Courseiva's 1,298-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Amazon Web Services exam blueprint
This DOP-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DOP-C02 exam.