The answer is warm standby, because a scaled-down application stack stays running in the secondary Region and can take over faster. This deployment model meets the RTO target by keeping a minimal version of the production environment—such as smaller EC2 instances and a replicated database—always active in the failover region, allowing it to scale up quickly when needed. On the SAA-C03 exam, this scenario tests your ability to balance recovery speed against always-on cost: warm standby sits between pilot light (cheaper but slower) and active-active (fastest but most expensive). A common trap is choosing pilot light when the RTO is tight, forgetting that starting idle resources from scratch takes too long. Memory tip: think of warm standby as a “warm engine” that is idling, not off—ready to rev up instantly without the full fuel cost of running at top speed.
SAA-C03 Design Resilient Architectures Practice Question
This SAA-C03 practice question tests your understanding of design resilient architectures. Read the scenario carefully and evaluate each option against the stated constraints before committing to an answer. After answering, compare your reasoning against the explanation and wrong-answer breakdown below. Once you have made your selection, read the full explanation to reinforce the concept and understand why each distractor is designed to mislead on exam day.
Exhibit
Disaster recovery test results:
- Requirement: RTO <= 15 minutes, RPO <= 5 minutes
- Primary Region: full application stack running 24/7
- Secondary Region:
- RDS cross-Region replica current within 2 minutes
- AMIs copied to secondary Region
- Auto Scaling group desired=0, min=0, max=6
- No load balancer or application instances running until failover
Measured failover drill:
- Start application stack in secondary Region: 12 minutes
- Promote database replica: 4 minutes
- Update DNS and propagate: 2 minutes
- Total recovery time: 18 minutes
Based on the exhibit, the current disaster recovery design misses the RTO target even though the database replica is current. Which deployment model best meets the requirements with the least always-on cost?
Clue words in this question
Noticing these words before you look at the options changes how you read each choice.
Clue: "best"
Why it matters: Signals that multiple options may be partially correct. Choose the option that most directly solves the exact problem described, not the one that sounds most complete.
Clue: "least"
Why it matters: You want the option with minimum overhead, fewest steps, or lowest impact — not the most feature-rich or comprehensive answer.
Clue: "always"
Why it matters: Absolute qualifier. An answer using 'always' is only correct if there are genuinely no exceptions — absolute statements are often wrong in networking.
Disaster recovery test results:
- Requirement: RTO <= 15 minutes, RPO <= 5 minutes
- Primary Region: full application stack running 24/7
- Secondary Region:
- RDS cross-Region replica current within 2 minutes
- AMIs copied to secondary Region
- Auto Scaling group desired=0, min=0, max=6
- No load balancer or application instances running until failover
Measured failover drill:
- Start application stack in secondary Region: 12 minutes
- Promote database replica: 4 minutes
- Update DNS and propagate: 2 minutes
- Total recovery time: 18 minutes
A
Pilot light, because only the database needs to be running in the secondary Region.
Why wrong: Pilot light keeps only a minimal set of components active in the secondary Region. In this exhibit, the database replica is already current, but the measured recovery time still exceeds the RTO because the application tier must be started from zero.
B
Warm standby, because a scaled-down application stack stays running in the secondary Region and can take over faster.
Warm standby is the best fit when you need faster recovery than pilot light but do not want the cost of full active-active capacity. The exhibit shows that starting the application stack from zero consumes most of the recovery time. Keeping a reduced but functional stack running in the secondary Region removes that startup delay and should bring the total recovery time within the 15-minute RTO while still keeping always-on cost below full production duplication.
C
Active-active, because both Regions should always serve traffic to guarantee the RTO.
Why wrong: Active-active can provide very fast recovery, but it requires both Regions to run at production scale and introduces significant operational complexity. The requirement asks for the least always-on cost, so this is more than necessary.
D
Backup and restore, because restoring from backups is the least expensive DR model available.
Why wrong: Backup and restore is the lowest-cost model, but its recovery time is typically much slower than the measured 18 minutes shown in the exhibit. It would not meet the stated RTO.
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Warm standby, because a scaled-down application stack stays running in the secondary Region and can take over faster.
Warm standby is the correct choice because it keeps a scaled-down application stack running in the secondary Region, which can be scaled up quickly to handle production traffic. This design meets the RTO target by reducing failover time compared to a pilot light, while avoiding the higher always-on cost of an active-active deployment.
Key principle: Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
✗
Pilot light, because only the database needs to be running in the secondary Region.
Why it's wrong here
Pilot light keeps only a minimal set of components active in the secondary Region. In this exhibit, the database replica is already current, but the measured recovery time still exceeds the RTO because the application tier must be started from zero.
✓
Warm standby, because a scaled-down application stack stays running in the secondary Region and can take over faster.
Why this is correct
Warm standby is the best fit when you need faster recovery than pilot light but do not want the cost of full active-active capacity. The exhibit shows that starting the application stack from zero consumes most of the recovery time. Keeping a reduced but functional stack running in the secondary Region removes that startup delay and should bring the total recovery time within the 15-minute RTO while still keeping always-on cost below full production duplication.
Clue confirmation
The clue words "best", "least", "always" in the question point toward this answer.
Related concept
Read the scenario before looking for a memorised answer.
✗
Active-active, because both Regions should always serve traffic to guarantee the RTO.
Why it's wrong here
Active-active can provide very fast recovery, but it requires both Regions to run at production scale and introduces significant operational complexity. The requirement asks for the least always-on cost, so this is more than necessary.
✗
Backup and restore, because restoring from backups is the least expensive DR model available.
Why it's wrong here
Backup and restore is the lowest-cost model, but its recovery time is typically much slower than the measured 18 minutes shown in the exhibit. It would not meet the stated RTO.
Common exam traps
Common exam trap: answer the scenario, not the keyword
The trap here is that candidates confuse pilot light with warm standby, assuming that only the database needs to be running to meet the RTO, but they overlook the time required to provision the application stack on failover.
Trap categories for this question
Command / output trap
Backup and restore is the lowest-cost model, but its recovery time is typically much slower than the measured 18 minutes shown in the exhibit. It would not meet the stated RTO.
Detailed technical explanation
How to think about this question
Warm standby typically uses a smaller EC2 Auto Scaling group or a single instance behind an Application Load Balancer in the secondary Region, with the database running as a Multi-AZ replica or cross-Region read replica. On failover, the application stack is scaled up (e.g., increasing desired capacity) and Route 53 DNS records are updated to redirect traffic, achieving RTOs in minutes rather than hours. This contrasts with pilot light, where the application stack must be fully deployed from scratch (e.g., via CloudFormation or AMI launches), which can take 15–30 minutes or more.
KKey Concepts to Remember
Read the scenario before looking for a memorised answer.
Find the constraint that changes the correct option.
Eliminate answers that are true in general but not in this case.
TExam Day Tips
→Watch for words such as best, first, most likely and least administrative effort.
→Review why wrong options are wrong, not only why the correct option is correct.
Key takeaway
Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.
Real-world example
How this comes up in practice
A startup's cloud architect reviews their monthly bill and notices costs are higher than expected for a long-running batch job. Switching from on-demand instances to Reserved Instances — or using Spot/Preemptible VMs — can reduce compute costs by up to 72 %. Questions like this test whether you understand the tradeoffs between commitment, flexibility, and cost across cloud pricing models.
What to study next
Got this wrong? Here's your next step.
Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.
Design Resilient Architectures — This question tests Design Resilient Architectures — Read the scenario before looking for a memorised answer..
What is the correct answer to this question?
The correct answer is: Warm standby, because a scaled-down application stack stays running in the secondary Region and can take over faster. — Warm standby is the correct choice because it keeps a scaled-down application stack running in the secondary Region, which can be scaled up quickly to handle production traffic. This design meets the RTO target by reducing failover time compared to a pilot light, while avoiding the higher always-on cost of an active-active deployment.
What should I do if I get this SAA-C03 question wrong?
Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.
Are there clue words in this question I should notice?
Yes — watch for: "best", "least", "always". Signals that multiple options may be partially correct. Choose the option that most directly solves the exact problem described, not the one that sounds most complete.
What is the key concept behind this question?
Read the scenario before looking for a memorised answer.
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
This SAA-C03 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SAA-C03 exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.