A production Amazon RDS database already has automated backups enabled. At 10:45 UTC, the team discovers that a faulty migration corrupted rows in a table at 10:30 UTC. The business wants the database restored to exactly the state it had at 10:30 UTC with minimal risk. Which two actions should the team take? Select two.
Answer choices
Why each option matters
Good practice is not just finding the correct option. The wrong answers often show the exact trap the exam wants you to fall into.
Best answer
Restore the database to a new instance using point-in-time restore for 10:30 UTC.
Correct. Point-in-time restore is the RDS recovery method for returning to a specific moment before the corruption occurred. Restoring to a new instance gives the team a clean database copy at the desired timestamp without risking the current production instance.
Best answer
Validate the restored database, then switch the application endpoint to the restored database.
Correct. A safe recovery process restores the data first, verifies that the recovered state is correct, and only then cuts the application over. This reduces operational risk because the original database remains intact until the team confirms the restored copy is usable.
Distractor review
Restore the most recent manual snapshot because it will include the 10:30 UTC state.
Incorrect. A snapshot only captures the database state at the moment the snapshot was taken, so it cannot reliably recreate an arbitrary time such as 10:30 UTC unless that exact snapshot happened then. The correct tool for restoring to a specific time is point-in-time restore.
Distractor review
Overwrite the existing database instance in place so the application keeps the same storage volume.
Incorrect. In-place recovery is riskier because it can make rollback difficult if the restore does not produce the expected data set. AWS RDS point-in-time restore is designed to create a new instance, which lets the team validate the data before changing production traffic.
Distractor review
Wait for automated backups to complete again, then replay the migration to restore the missing rows.
Incorrect. Waiting for another backup does not recover the lost state, and replaying the migration can reapply the corruption or introduce additional inconsistency. The problem is a known bad change, so the correct response is to restore to a known-good time before that change.
Common exam trap
Common exam trap: answer the scenario, not the keyword
Many certification questions include familiar terms but test a specific constraint. Read the exact wording before choosing an answer that is generally true but wrong for this case.
Technical deep dive
How to think about this question
This question should be treated as a scenario, not a definition check. Identify the problem, the constraint and the best action. Then compare each option against those facts.
KKey Concepts to Remember
- Read the scenario before looking for a memorised answer.
- Find the constraint that changes the correct option.
- Eliminate answers that are true in general but not in this case.
- Use explanations to understand the rule behind the answer.
TExam Day Tips
- Underline the problem statement mentally.
- Watch for words such as best, first, most likely and least administrative effort.
- Review why wrong options are wrong, not only why the correct option is correct.
Related practice questions
Related SAA-C03 practice-question pages
Use these pages to review the topic behind this question. This is how one missed question becomes focused revision.
SAA-C03 VPC practice questions
Practise SAA-C03 questions linked to SAA-C03 VPC.
SAA-C03 S3 lifecycle policy questions
Practise SAA-C03 questions linked to SAA-C03 S3 lifecycle policy questions.
SAA-C03 RDS Multi-AZ questions
Practise SAA-C03 questions linked to SAA-C03 RDS Multi-AZ questions.
SAA-C03 IAM policy practice questions
Practise SAA-C03 questions linked to SAA-C03 IAM policy.
SAA-C03 Route 53 failover questions
Practise SAA-C03 questions linked to SAA-C03 Route 53 failover questions.
SAA-C03 CloudFront practice questions
Practise SAA-C03 questions linked to SAA-C03 CloudFront.
SAA-C03 NAT gateway questions
Practise SAA-C03 questions linked to SAA-C03 NAT gateway questions.
SAA-C03 VPC endpoint questions
Practise SAA-C03 questions linked to SAA-C03 VPC endpoint questions.
SAA-C03 Auto Scaling practice questions
Practise SAA-C03 questions linked to SAA-C03 Auto Scaling.
SAA-C03 disaster recovery questions
Practise SAA-C03 questions linked to SAA-C03 disaster recovery questions.
SAA-C03 high availability questions
Practise SAA-C03 questions linked to SAA-C03 high availability questions.
SAA-C03 cost optimization questions
Practise SAA-C03 questions linked to SAA-C03 cost optimization questions.
More questions from this exam
Keep practising from the same exam bank, or move into a focused topic page if this question exposed a weak area.
Question 1
A team needs to distribute TCP traffic (not HTTP) across multiple services. The services must see the original client source IP for auditing. Which AWS load balancer is the best fit?
Question 2
A team wants to run containerized services with AWS-managed orchestration and autoscaling. They do NOT require Kubernetes compatibility. Which AWS service choice is most appropriate to meet these goals?
Question 3
A solutions architect is designing an S3 bucket for a IoT ingestion API. The objects must never be publicly accessible, even if a developer later adds an overly broad bucket policy. What should the architect configure? The design must avoid adding custom operational scripts.
Question 4
A solutions architect is designing an S3 bucket for a claims portal. The objects must never be publicly accessible, even if a developer later adds an overly broad bucket policy. What should the architect configure?
Question 5
A team wants to delegate IAM management to developers, but must ensure developers can never grant themselves permissions beyond a specific limit. Which AWS mechanism best matches this requirement?
Question 6
A solutions architect is designing an S3 bucket for a healthcare document service. The objects must never be publicly accessible, even if a developer later adds an overly broad bucket policy. What should the architect configure?
FAQ
Questions learners often ask
What does this SAA-C03 question test?
Read the scenario before looking for a memorised answer.
What is the correct answer to this question?
The correct answer is: Restore the database to a new instance using point-in-time restore for 10:30 UTC. — Because automated backups are enabled, the correct recovery method is point-in-time restore to a new RDS instance at 10:30 UTC. That recreates the database state from before the faulty migration. After the restored instance is validated, the application should be pointed at the recovered database so production can resume from the known-good state. This approach minimizes risk because the original instance is preserved until cutover. A snapshot is not the right tool for recreating an exact timestamp unless it was taken at that time. Overwriting the existing database in place is operationally riskier than restoring to a separate instance and validating first. Waiting for more backups or replaying the migration does not undo the corruption and can make the situation worse.
What should I do if I get this SAA-C03 question wrong?
Then try more questions from the same exam bank and focus on understanding why the wrong options are tempting.
Discussion
Sign in to join the discussion.