SAA-C03 Design Resilient Architectures Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✗

  Enable S3 lifecycle policies to automatically move objects to Glacier after 30 days only.

  Why it's wrong here

  Lifecycle policies that transition objects to Glacier after 30 days only reduce storage costs by moving data to cold storage, but they do not protect against accidental overwrites or deletes. Without versioning, a write or delete permanently replaces or removes the only copy, and Glacier's retrieval times make rapid recovery impractical. Additionally, this approach lacks any cross-Region copy, so it does not provide resilience against an entire Region becoming unavailable.

  When this WOULD be correct

  A question asking for cost-effective long-term archival of infrequently accessed data, with no requirement for versioning or cross-region replication, would make this correct.

• ✓

  Enable S3 versioning and configure Cross-Region Replication to a destination bucket in another Region.

  Why this is correct

  Enabling S3 versioning preserves every version of an object, so accidental overwrites or deletes can be undone by restoring a prior version or removing a delete marker. Cross-Region Replication then asynchronously copies new and updated objects to a bucket in another Region, providing a geographically separate copy for disaster recovery. Together these features directly address both object-level corruption and Region-level failures, making them the correct solution.

• ✗

  Disable all versioning and rely on AWS Backup to restore objects from a scheduled backup window.

  Why it's wrong here

  Disabling versioning removes the ability to recover from accidental overwrites or deletes because old object states are immediately discarded. AWS Backup can restore objects from scheduled snapshots, but the backup window and restore process introduce significant RPO and RTO, meaning recent changes may be lost and recovery could take hours. Versioning provides near-instant, per-object rollback that backups cannot match, and the lack of replication still leaves the data vulnerable to Regional failures.

  When this WOULD be correct

  If the question required a centralized backup solution across multiple AWS services (e.g., EC2, RDS, and S3) with a defined retention policy and compliance auditing, AWS Backup would be the correct answer.

• ✗

  Enable S3 Block Public Access and SSE-S3 encryption, without using versioning or replication.

  Why it's wrong here

  Block Public Access and SSE-S3 encryption are security controls that prevent unauthorized public access and encrypt data at rest, but they do not address data resilience. These features do not create additional object versions, nor do they replicate data across Regions, so an overwrite, delete, or Regional outage still results in permanent loss. Security and encryption are necessary for protecting data from threats, but they are independent of availability and recovery requirements.

  When this WOULD be correct

  An exam question asking for the best way to secure an S3 bucket from public access and ensure data encryption at rest, without mentioning versioning or replication requirements, would make this option correct.

Option-by-option analysis

Why each answer is right or wrong

Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The SAA-C03 exam frequently reuses these exact scenarios with slightly different constraints.

Analysis generated from the official SAA-C03blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”

Go deeper

Related to this question