SAA-C03 Design Resilient Architectures Practice Question
This SAA-C03 practice question tests your understanding of design resilient architectures. Read the scenario carefully and evaluate each option against the stated constraints before committing to an answer. After answering, compare your reasoning against the explanation and wrong-answer breakdown below. Once you have made your selection, read the full explanation to reinforce the concept and understand why each distractor is designed to mislead on exam day.
Exhibit
Disaster recovery test results:
- Requirement: RTO <= 15 minutes, RPO <= 5 minutes
- Primary Region: full application stack running 24/7
- Secondary Region:
- RDS cross-Region replica current within 2 minutes
- AMIs copied to secondary Region
- Auto Scaling group desired=0, min=0, max=6
- No load balancer or application instances running until failover
Measured failover drill:
- Start application stack in secondary Region: 12 minutes
- Promote database replica: 4 minutes
- Update DNS and propagate: 2 minutes
- Total recovery time: 18 minutes
Based on the exhibit, the current disaster recovery design misses the RTO target even though the database replica is current. Which deployment model best meets the requirements with the least always-on cost?
Clue words in this question
Noticing these words before you look at the options changes how you read each choice.
Clue: "least"
Why it matters: You want the option with minimum overhead, fewest steps, or lowest impact — not the most feature-rich or comprehensive answer.
Clue: "always"
Why it matters: Absolute qualifier. An answer using 'always' is only correct if there are genuinely no exceptions — absolute statements are often wrong in networking.
Exhibit
Disaster recovery test results:
- Requirement: RTO <= 15 minutes, RPO <= 5 minutes
- Primary Region: full application stack running 24/7
- Secondary Region:
- RDS cross-Region replica current within 2 minutes
- AMIs copied to secondary Region
- Auto Scaling group desired=0, min=0, max=6
- No load balancer or application instances running until failover
Measured failover drill:
- Start application stack in secondary Region: 12 minutes
- Promote database replica: 4 minutes
- Update DNS and propagate: 2 minutes
- Total recovery time: 18 minutes
A
Pilot light, because only the database needs to be running in the secondary Region.
Why wrong: Pilot light keeps only a minimal set of components active in the secondary Region. In this exhibit, the database replica is already current, but the measured recovery time still exceeds the RTO because the application tier must be started from zero.
B
Warm standby, because a scaled-down application stack stays running in the secondary Region and can take over faster.
Warm standby is the best fit when you need faster recovery than pilot light but do not want the cost of full active-active capacity. The exhibit shows that starting the application stack from zero consumes most of the recovery time. Keeping a reduced but functional stack running in the secondary Region removes that startup delay and should bring the total recovery time within the 15-minute RTO while still keeping always-on cost below full production duplication.
C
Active-active, because both Regions should always serve traffic to guarantee the RTO.
Why wrong: Active-active can provide very fast recovery, but it requires both Regions to run at production scale and introduces significant operational complexity. The requirement asks for the least always-on cost, so this is more than necessary.
D
Backup and restore, because restoring from backups is the least expensive DR model available.
Why wrong: Backup and restore is the lowest-cost model, but its recovery time is typically much slower than the measured 18 minutes shown in the exhibit. It would not meet the stated RTO.
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Warm standby, because a scaled-down application stack stays running in the secondary Region and can take over faster.
Warm standby is the correct choice because it keeps a scaled-down application stack running in the secondary Region, which can be scaled up quickly to handle production traffic. This design meets the RTO target by reducing failover time compared to a pilot light, while avoiding the higher always-on cost of an active-active deployment.
Key principle: Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
✗
Pilot light, because only the database needs to be running in the secondary Region.
Why it's wrong here
Pilot light keeps only a minimal set of components active in the secondary Region. In this exhibit, the database replica is already current, but the measured recovery time still exceeds the RTO because the application tier must be started from zero.
When this WOULD be correct
A question where the RTO is longer (e.g., hours) and the primary concern is minimizing cost while keeping critical data available. For example: 'A company needs a DR strategy that minimizes cost but can restore database access within 4 hours. The application can be rebuilt quickly from scripts.'
✓
Warm standby, because a scaled-down application stack stays running in the secondary Region and can take over faster.
Why this is correct
Warm standby is the best fit when you need faster recovery than pilot light but do not want the cost of full active-active capacity. The exhibit shows that starting the application stack from zero consumes most of the recovery time. Keeping a reduced but functional stack running in the secondary Region removes that startup delay and should bring the total recovery time within the 15-minute RTO while still keeping always-on cost below full production duplication.
Clue confirmation
The clue words "least", "always" in the question point toward this answer.
Related concept
Read the scenario before looking for a memorised answer.
✗
Active-active, because both Regions should always serve traffic to guarantee the RTO.
Why it's wrong here
Active-active can provide very fast recovery, but it requires both Regions to run at production scale and introduces significant operational complexity. The requirement asks for the least always-on cost, so this is more than necessary.
When this WOULD be correct
An exam scenario where the application requires near-zero RTO (e.g., under 1 minute) and can tolerate the higher cost, such as a global e-commerce platform that must remain available during a regional outage without any traffic rerouting delay.
✗
Backup and restore, because restoring from backups is the least expensive DR model available.
Why it's wrong here
Backup and restore is the lowest-cost model, but its recovery time is typically much slower than the measured 18 minutes shown in the exhibit. It would not meet the stated RTO.
When this WOULD be correct
A question where the RTO is lenient (e.g., hours) and the primary goal is to minimize cost, with no requirement for a current database replica. For example: 'Which DR model is the least expensive and can tolerate an RTO of several hours?'
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The SAA-C03 exam frequently reuses these exact scenarios with slightly different constraints.
✓Warm standby, because a scaled-down application stack stays running in the secondary Region and can take over faster.Correct answer▾
Why this is correct
Warm standby is the best fit when you need faster recovery than pilot light but do not want the cost of full active-active capacity. The exhibit shows that starting the application stack from zero consumes most of the recovery time. Keeping a reduced but functional stack running in the secondary Region removes that startup delay and should bring the total recovery time within the 15-minute RTO while still keeping always-on cost below full production duplication.
✗Pilot light, because only the database needs to be running in the secondary Region.Wrong answer — click to see why▾
Why this is wrong here
The pilot light model only keeps the database running in the secondary Region, not the application stack. This means the application must be provisioned and scaled up after a disaster, which takes too long to meet the RTO, even if the database is current.
★ When this WOULD be the correct answer
A question where the RTO is longer (e.g., hours) and the primary concern is minimizing cost while keeping critical data available. For example: 'A company needs a DR strategy that minimizes cost but can restore database access within 4 hours. The application can be rebuilt quickly from scripts.'
Why candidates choose this
Candidates may think that because the database replica is current, only the database needs to be running to meet the RTO, overlooking the time required to start and configure the application stack.
✗Active-active, because both Regions should always serve traffic to guarantee the RTO.Wrong answer — click to see why▾
Why this is wrong here
Active-active requires both regions to serve live traffic continuously, which incurs higher always-on costs than warm standby. The question asks for the 'least always-on cost' while meeting RTO, and active-active is more expensive because it runs full production capacity in both regions.
★ When this WOULD be the correct answer
An exam scenario where the application requires near-zero RTO (e.g., under 1 minute) and can tolerate the higher cost, such as a global e-commerce platform that must remain available during a regional outage without any traffic rerouting delay.
Why candidates choose this
Candidates may think active-active is the fastest failover model and assume it always meets RTO best, overlooking the cost constraint and that warm standby can achieve the same RTO at lower cost.
✗Backup and restore, because restoring from backups is the least expensive DR model available.Wrong answer — click to see why▾
Why this is wrong here
Backup and restore typically has a high RTO because it involves restoring data from backups, which is slower than having a running replica. The question states the database replica is current, so a warm standby with a scaled-down application stack can meet the RTO faster.
★ When this WOULD be the correct answer
A question where the RTO is lenient (e.g., hours) and the primary goal is to minimize cost, with no requirement for a current database replica. For example: 'Which DR model is the least expensive and can tolerate an RTO of several hours?'
Why candidates choose this
Candidates may think backup and restore is the cheapest option and assume it can meet any RTO if backups are frequent, overlooking the time needed to restore and the fact that a current replica already exists.
Analysis generated from the official SAA-C03blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Common exam traps
Common exam trap: answer the scenario, not the keyword
The trap here is that candidates confuse pilot light with warm standby, assuming that only the database needs to be running to meet the RTO, but they overlook the time required to provision the application stack on failover.
Trap categories for this question
Command / output trap
Backup and restore is the lowest-cost model, but its recovery time is typically much slower than the measured 18 minutes shown in the exhibit. It would not meet the stated RTO.
Detailed technical explanation
How to think about this question
Warm standby typically uses a smaller EC2 Auto Scaling group or a single instance behind an Application Load Balancer in the secondary Region, with the database running as a Multi-AZ replica or cross-Region read replica. On failover, the application stack is scaled up (e.g., increasing desired capacity) and Route 53 DNS records are updated to redirect traffic, achieving RTOs in minutes rather than hours. This contrasts with pilot light, where the application stack must be fully deployed from scratch (e.g., via CloudFormation or AMI launches), which can take 15–30 minutes or more.
KKey Concepts to Remember
Read the scenario before looking for a memorised answer.
Find the constraint that changes the correct option.
Eliminate answers that are true in general but not in this case.
TExam Day Tips
→Watch for words such as best, first, most likely and least administrative effort.
→Review why wrong options are wrong, not only why the correct option is correct.
Key takeaway
Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.
Real-world example
How this comes up in practice
A startup's cloud architect reviews their monthly bill and notices costs are higher than expected for a long-running batch job. Switching from on-demand instances to Reserved Instances — or using Spot/Preemptible VMs — can reduce compute costs by up to 72 %. Questions like this test whether you understand the tradeoffs between commitment, flexibility, and cost across cloud pricing models.
What to study next
Got this wrong? Here's your next step.
Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.
Design Resilient Architectures — This question tests Design Resilient Architectures — Read the scenario before looking for a memorised answer..
What is the correct answer to this question?
The correct answer is: Warm standby, because a scaled-down application stack stays running in the secondary Region and can take over faster. — Warm standby is the correct choice because it keeps a scaled-down application stack running in the secondary Region, which can be scaled up quickly to handle production traffic. This design meets the RTO target by reducing failover time compared to a pilot light, while avoiding the higher always-on cost of an active-active deployment.
What should I do if I get this SAA-C03 question wrong?
Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.
Are there clue words in this question I should notice?
Yes — watch for: "least", "always". You want the option with minimum overhead, fewest steps, or lowest impact — not the most feature-rich or comprehensive answer.
What is the key concept behind this question?
Read the scenario before looking for a memorised answer.
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
This SAA-C03 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SAA-C03 exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.