CompTIA Cloud Essentials+ (CLO-002)Governance, Risk, Compliance and SecurityHard
A global conglomerate is migrating its enterprise resource planning (ERP) system to a multi-region public cloud deployment. The company operates in several countries, each with unique data residency and privacy laws. To ensure compliance while maintaining operational efficiency, the cloud architecture team must implement a solution that dynamically routes user requests to the nearest compliant data center based on the user's geographical location and the data's regulatory requirements. Which architectural component is crucial for achieving this goal?
- AContent Delivery Network (CDN)
- BGlobal Load Balancer
- CVirtual Private Cloud (VPC)
- DIdentity and Access Management (IAM)
Show answer & explanationAnswer & explanation
Correct answer: B. Global Load Balancer
A Global Load Balancer is designed to distribute incoming application traffic across multiple regions and data centers worldwide. It can be configured with location-based routing policies and health checks, enabling it to direct user requests to the nearest, most performant, and compliant data center, thereby addressing both data residency requirements and operational efficiency for a global user base.
Why the other options are wrong
- A. CDN primarily caches static content closer to users for faster delivery, but does not dynamically route complex application requests based on data residency and compliance logic.
- C. VPC provides isolated network environments within a single cloud region, not global traffic distribution across multiple regions for compliance routing.
- D. IAM manages user authentication and authorization, but does not handle the dynamic routing of user requests to specific data centers based on geographic or regulatory rules.
Global Load Balancer
A network service that distributes incoming application traffic across multiple geographically dispersed servers or data centers to optimize performance, ensure high availability, and facilitate compliance.
- Routes traffic based on user location, server health, and custom policies.
- Essential for multi-region deployments and disaster recovery.
- Can help enforce data residency requirements by directing traffic to specific compliant regions.
Memory trick: Global traffic needs a smart balancer, not just a content network.