A security architect is establishing requirements to design resilience in an enterprise system that will be extended to other physical locations. The system must

- Be survivable to one environmental catastrophe
- Be recoverable within 24 hours of critical loss of availability
- Be resilient to active exploitation of one site-to-site VPN solution

Which of the following is the best strategy for the architect to use?
A. Load-balance connection attempts and data ingress at internet gateways
B. Allocate fully redundant and geographically distributed standby sites.
C. Employ layering of routers from diverse vendors
D. Lease space to establish cold sites throughout other countries
E. Use orchestration to procure, provision, and transfer application workloads to cloud services
F. Implement full weekly backups to be stored off-site for each of the company's sites