Warm Standby vs Pilot Light: Choosing the Right DR Strategy
A payments platform requires disaster recovery across Regions. Requirements: RPO of 15 minutes and RTO of about 1 hour. The business cannot afford full duplicate capacity in both Regions all the time, but the team wants automated readiness so failover is mostly operationally guided rather than a slow rebuild. Which DR strategy is the best fit?
Quick Answer
The answer is warm standby. This strategy is the correct choice because it maintains a partially provisioned environment in the secondary Region with core infrastructure—such as a smaller EC2 Auto Scaling group and a standby database using frequent replication—which directly supports an RPO of 15 minutes and an RTO of about 1 hour, while avoiding the full cost of duplicate capacity. On the SAA-C03 exam, this scenario tests your ability to distinguish between pilot light, which requires manual scaling and a slower rebuild, and warm standby, which offers automated readiness and guided failover. A common trap is choosing pilot light because it seems cheaper, but the requirement for automated readiness and a 1-hour RTO disqualifies it. Memory tip: think of warm standby as a "warm engine" that is idling and ready to accelerate, whereas pilot light is just a spark that needs fuel and time to ignite.
⚠ Common exam trap
A common mix-up: candidates confuse pilot light with warm standby, assuming minimal infrastructure is sufficient for a 1-hour RTO, but pilot light's need to provision and configure full services after failover typically pushes RTO beyond 1 hour, whereas warm standby's partially provisioned environment allows faster scaling.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Warm standby, keeping core infrastructure and a partially provisioned environment ready in the secondary Region with frequent data replication.
Warm standby is the best fit because it maintains a partially provisioned environment in the secondary Region with core infrastructure (e.g., a smaller EC2 Auto Scaling group, a standby database with synchronous or asynchronous replication) and frequent data replication, enabling an RPO of 15 minutes and an RTO of about 1 hour. This approach balances cost and automated readiness, as the team can scale up the standby environment during failover without the expense of full duplicate capacity, while still meeting the recovery objectives through automated replication (e.g., Amazon RDS Multi-AZ cross-Region or DynamoDB global tables).
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Backup and restore only, relying on scheduled snapshots and manual restores during incidents.
Why it's wrong here
Backup/restore can meet data-loss tolerance in some cases, but RTO of 1 hour is often too aggressive for manual restores.
When this WOULD be correct
A company with a non-critical application that can tolerate an RPO of several hours and an RTO of 24+ hours, and where cost is the primary concern, would choose backup and restore.
- ✗
Pilot light, keeping only minimal infrastructure in the secondary Region and starting full services after failover.
Why it's wrong here
Pilot light is cheaper, but RTO of 1 hour may not be achievable if full compute/services must be brought up from near-zero.
When this WOULD be correct
A scenario with a longer RTO (e.g., 4-6 hours) and a moderate RPO (e.g., 1 hour), where cost savings from minimal standby infrastructure are prioritized over rapid failover, and the team can tolerate manual scaling steps.
- ✓
Warm standby, keeping core infrastructure and a partially provisioned environment ready in the secondary Region with frequent data replication.
Why this is correct
Warm standby balances cost and readiness by keeping enough capacity and services running to shorten recovery time while meeting RPO needs.
- ✗
Active/active, routing production traffic to both Regions continuously and accepting dual-region complexity.
Why it's wrong here
Active/active best fits very low RTO and high availability, but it usually costs more than the stated budget constraints.
When this WOULD be correct
An application requiring zero RPO and near-zero RTO with a budget that supports full-time dual-region capacity, such as a global real-time trading platform that cannot tolerate any data loss or downtime.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The SAA-C03 exam frequently reuses these exact scenarios with slightly different constraints.
✓Warm standby, keeping core infrastructure and a partially provisioned environment ready in the secondary Region with frequent data replication.Correct answer▾
Why this is correct
Warm standby balances cost and readiness by keeping enough capacity and services running to shorten recovery time while meeting RPO needs.
✗Backup and restore only, relying on scheduled snapshots and manual restores during incidents.Wrong answer — click to see why▾
Why this is wrong here
Backup and restore with scheduled snapshots cannot meet the RPO of 15 minutes (snapshots are typically less frequent) and the RTO of about 1 hour (manual restores are slow and unpredictable).
★ When this WOULD be the correct answer
A company with a non-critical application that can tolerate an RPO of several hours and an RTO of 24+ hours, and where cost is the primary concern, would choose backup and restore.
Why candidates choose this
Candidates may think backup and restore is the simplest and cheapest DR strategy, overlooking the strict RPO and RTO requirements in the question.
✗Pilot light, keeping only minimal infrastructure in the secondary Region and starting full services after failover.Wrong answer — click to see why▾
Why this is wrong here
Pilot light requires starting full services after failover, which typically takes more than 1 hour (RTO) due to provisioning and scaling, and may not meet the 15-minute RPO if data replication is not continuous.
★ When this WOULD be the correct answer
A scenario with a longer RTO (e.g., 4-6 hours) and a moderate RPO (e.g., 1 hour), where cost savings from minimal standby infrastructure are prioritized over rapid failover, and the team can tolerate manual scaling steps.
Why candidates choose this
Candidates may confuse pilot light with warm standby, assuming minimal infrastructure can be quickly scaled, but underestimate the time needed to provision and configure full production capacity from a minimal base.
✗Active/active, routing production traffic to both Regions continuously and accepting dual-region complexity.Wrong answer — click to see why▾
Why this is wrong here
Active/active requires full duplicate capacity in both Regions at all times, which contradicts the requirement that the business cannot afford full duplicate capacity in both Regions all the time.
★ When this WOULD be the correct answer
An application requiring zero RPO and near-zero RTO with a budget that supports full-time dual-region capacity, such as a global real-time trading platform that cannot tolerate any data loss or downtime.
Why candidates choose this
Candidates may think active/active provides the best availability and failover speed, overlooking the cost constraint and the specific requirement to avoid full duplicate capacity.
Analysis generated from the official SAA-C03blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Go deeper
Related to this question
About these practice questions
This SAA-C03 question is part of Courseiva's 302-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on SAA-C03
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. A payments platform requires disaster recovery across Regions. Requirements: RPO of 15 minutes and RTO of about 1 hour. The business cannot afford full duplicate capacity in both Regions all the time, but the team wants automated readiness so failover is mostly operationally guided rather than a slow rebuild. Which DR strategy is the best fit?
medium- A.Backup and restore only, relying on scheduled snapshots and manual restores during incidents.
- B.Pilot light, keeping only minimal infrastructure in the secondary Region and starting full services after failover.
- ✓ C.Warm standby, keeping core infrastructure and a partially provisioned environment ready in the secondary Region with frequent data replication.
- D.Active/active, routing production traffic to both Regions continuously and accepting dual-region complexity.
Why C: Warm standby is the best fit because it maintains a partially provisioned environment in the secondary Region with core infrastructure (e.g., a smaller EC2 instance fleet, a replicated database) and uses frequent data replication (e.g., Amazon RDS cross-Region replication or DynamoDB global tables) to achieve an RPO of 15 minutes. The RTO of about 1 hour is achievable by scaling up the standby environment and redirecting traffic, which is faster than a full rebuild but avoids the cost of full duplicate capacity. This balances the business constraint of not affording active/active with the need for automated readiness and guided failover.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SAA-C03 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SAA-C03 exam.