What is the best Cloud SQL setup for low RTO/RPO during a regional outage?
You are deploying a MySQL database workload onto Cloud SQL. The database must be able to scale up to support several readers from various geographic regions. The database must be highly available and meet low RTO and RPO requirements, even in the event of a regional outage. You need to ensure that interruptions to the readers are minimal during a database failover. What should you do?
Community Votes
100% of anonymous learners picked answer C. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
The exam tests whether you know that promoting a cross-region HA read replica provides faster failover than restoring a backup, and that same-region replicas cannot survive a regional outage.
For a Cloud SQL MySQL workload, deploy an HA instance in Region A, an HA read replica in Region B, and use cascading replicas; promote the Region B replica on regional outage to meet low RTO/RPO. Community consensus favors this option over backup/restore and same-region replication.
Selecting D, because it mentions high availability, but it only covers zone-level failover and does not protect against a regional outage.
Community Discussion (6 comments)
- Combines high availability with geographic distribution of read workloads. - Promoting a highly available read replica can provide a quick failover solution, potentially meeting low RTO and RPO requirements. ===== Why not A: Restoring from backup to a new instance in another region during a regional outage might not meet low RTO and RPO requirements due to the time it takes to perform a restore.
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
Option C is the most complete solution. It creates a highly available Cloud SQL instance in the primary region and a highly available read replica in a second region. By using cascading read replicas, it also scales read workloads across multiple geographic areas. When Region A experiences an outage, promoting the HA read replica in Region B provides a fast failover with minimal interruption, and the HA configuration of that replica helps keep it resilient.
The promotion of a replica is a much faster operation than restoring a backup, which is why A is not acceptable. As comment [1] and [2] note, restoring from backup takes too long and would not meet low RTO/RPO requirements. C combines geographic distribution with a quick failover path.
Why the Other Options Are Wrong
Option A relies on restoring a multi-regional Cloud Storage backup to a new instance. Restores are time-consuming and involve data transfer, making it impossible to meet low RTO/RPO in a disaster scenario. The backup approach is also more complex and does not provide seamless reader failover.
Option B creates read replicas in multiple regions and promotes one, but it does not make the secondary replica highly available. A single-zone read replica can become a single point of failure, as noted by the lack of HA in the replica tier. This can increase downtime for readers during failover.
Option D only places read replicas in the same region as the primary. This handles a zonal failure by failing over to the standby, but it does nothing for a regional outage. It also fails to meet the requirement of supporting readers from various geographic regions.
Community Comment Notes
Comment [1] and [2] explicitly reject backup/restore because it is too slow, which supports C over A. Comment [4] argues for B, but it overlooks the need for the promoted replica to be highly available in a secondary region, which C provides. Comment [3] questions whether HA read replicas exist, but Cloud SQL supports HA on read replicas, and the official replication documentation covers this setup.
Official Reference
Exam Strategy
In disaster-recovery scenarios, always weigh RTO and RPO: promoting a read replica is much faster than restoring from backup. Before choosing an answer, verify that the replica you will promote is in a different region and has high availability enabled so that the failover is both quick and resilient.