SAA-C03 Design Resilient Architectures Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✗

  Backup and restore only, with no continuously running infrastructure in the secondary Region.

  Why it's wrong here

  Backup and restore in disaster recovery stores data snapshots or databases in the secondary Region (e.g., S3 cross-Region replication, EBS snapshots, RDS snapshots) but has absolutely no running infrastructure there. To recover, you must rebuild the entire environment from scratch—creating EC2 instances, installing software, restoring data, and validating the system—which normally takes many hours or even days, far exceeding the 6-hour RTO. Additionally, data loss is potentially higher because RPO is tied to the last backup or replication cycle, while the lack of pre-provisioned resources makes RTO unpredictable.

  When this WOULD be correct

  For a non-critical application with RTO > 24 hours and RPO > 24 hours, where cost is the primary concern and data loss of up to a day is acceptable.

• ✗

  Pilot light, keeping only the minimum resources needed to bootstrap the environment.

  Why it's wrong here

  Pilot light keeps only the most critical infrastructure running—such as a replicated database and a minimal compute core—while the rest of the application stack remains stopped. When a disaster occurs, you must deploy and configure all application servers, load balancers, and auxiliary services before scaling to full capacity; this bootstrap process can easily consume most or all of the 6-hour RTO window, especially for a complex retail platform. Because only base resources are warm, it provides faster recovery than backup-and-restore but still risks missing a strict recovery time objective.

  When this WOULD be correct

  A scenario where the business requires very low cost for the DR site, can tolerate longer RTO (e.g., 12-24 hours), and has minimal RPO requirements (e.g., 1 hour). For example, a non-critical internal tool that can afford significant downtime during a disaster.

• ✓

  Warm standby, keeping a reduced but ready-to-scale environment in the secondary Region.

  Why this is correct

  Warm standby in the secondary Region runs a scaled-down but fully functional copy of your production stack, typically with key databases and services already deployed and synchronized. You can provision extra compute capacity on demand via Auto Scaling or pre-provisioned cluster resizing to reach full production load within the 6-hour RTO. This balances cost and recovery speed by keeping idle but ready infrastructure that can be quickly scaled up, making it the most appropriate choice for the stated requirement.

• ✗

  Multi-site active-active, serving production traffic from both Regions at all times.

  Why it's wrong here

  Multi-site active-active serves production traffic concurrently from both Regions, which demands full capacity in each location and active-active database replication (e.g., DynamoDB global tables or multi-writer Aurora) to handle writes from both sides. Running and operating two full production environments continuously is substantially more expensive and operationally complex than needed for a disaster recovery plan, and it introduces challenges like conflict resolution, data consistency, and cross-Region latency that are overkill for meeting a 6-hour RTO.

  When this WOULD be correct

  An exam question requiring zero RTO and zero RPO for a mission-critical application with unlimited budget, where continuous active-active traffic distribution is acceptable.

Option-by-option analysis

Why each answer is right or wrong

Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The SAA-C03 exam frequently reuses these exact scenarios with slightly different constraints.

Analysis generated from the official SAA-C03blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”

Go deeper

Related to this question