The answer is to place an SQS queue between EventBridge and the consumer, with a DLQ for poison messages. This is correct because the SQS queue decouples the event delivery from the downstream payment API, allowing events to be stored durably during a downstream outage and processed later without aging out or being lost. The Dead Letter Queue (DLQ) captures events that repeatedly fail, preventing poison messages from blocking the queue and ensuring no events are dropped due to retry exhaustion. On the SAA-C03 exam, this scenario tests your understanding of decoupling patterns for resilience—a common trap is thinking EventBridge retries alone are sufficient, but they have a finite window and no durable storage. Remember the memory tip: "Queue to survive, DLQ to thrive"—the queue absorbs the outage, and the DLQ handles the poison.
SAA-C03 Design Resilient Architectures Practice Question
This SAA-C03 practice question tests your understanding of design resilient architectures. Read the scenario carefully and evaluate each option against the stated constraints before committing to an answer. After answering, compare your reasoning against the explanation and wrong-answer breakdown below. Once you have made your selection, read the full explanation to reinforce the concept and understand why each distractor is designed to mislead on exam day.
Exhibit
Amazon EventBridge rule:
- source: orders.checkout
- target: Lambda function process-orders
- retry policy: default
CloudWatch metrics:
- Invocations: 120/min
- Throttles: 87/min
- ApproximateAgeOfOldestEvent: 900 seconds
Lambda log excerpt:
2026-04-27T18:22:41Z payment API timeout
2026-04-27T18:22:44Z retry attempt 3 failed
2026-04-27T18:22:48Z processing orderId=90118 paused
Business requirement:
No events should be lost during a temporary payment API outage, and the system must absorb bursts instead of failing immediately.
Based on the exhibit, downstream payment timeouts cause EventBridge deliveries to back up and some events are retried until they age out. What change best improves resilience and preserves events during downstream outages?
Clue words in this question
Noticing these words before you look at the options changes how you read each choice.
Clue: "best"
Why it matters: Signals that multiple options may be partially correct. Choose the option that most directly solves the exact problem described, not the one that sounds most complete.
Amazon EventBridge rule:
- source: orders.checkout
- target: Lambda function process-orders
- retry policy: default
CloudWatch metrics:
- Invocations: 120/min
- Throttles: 87/min
- ApproximateAgeOfOldestEvent: 900 seconds
Lambda log excerpt:
2026-04-27T18:22:41Z payment API timeout
2026-04-27T18:22:44Z retry attempt 3 failed
2026-04-27T18:22:48Z processing orderId=90118 paused
Business requirement:
No events should be lost during a temporary payment API outage, and the system must absorb bursts instead of failing immediately.
A
Increase the Lambda timeout so each invocation can wait longer for the payment API.
Why wrong: A longer timeout does not provide buffering. If the payment API remains unavailable, invocations stay occupied longer and the backlog becomes harder to drain.
B
Put an Amazon SQS queue between EventBridge and the consumer, and have workers drain the queue with a DLQ for poison messages.
SQS is the right durability and buffering layer for this requirement. EventBridge can publish orders.checkout events to a queue, and workers can consume them at a controlled rate even when the payment API is unavailable. This decouples event ingestion from downstream processing, absorbs bursts, and preserves events until the outage ends. A DLQ provides a safe landing zone for messages that continue to fail after retries so they are not silently dropped.
C
Switch the target to a Lambda function with reserved concurrency of zero during outages.
Why wrong: Reserved concurrency of zero stops processing entirely and does not create durable buffering. It would make the backlog worse and does not satisfy the requirement to preserve events during an outage.
D
Replace EventBridge with CloudWatch Logs subscriptions so the consumer can poll the log stream later.
Why wrong: CloudWatch Logs subscriptions are not a durable application messaging pattern and are not a substitute for queue-based buffering in this scenario.
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Put an Amazon SQS queue between EventBridge and the consumer, and have workers drain the queue with a DLQ for poison messages.
Option B is correct because introducing an SQS queue between EventBridge and the consumer decouples the event delivery from the downstream payment API. During outages, events are stored durably in SQS and can be processed later without being lost. A Dead Letter Queue (DLQ) captures events that fail repeatedly, preventing poison messages from blocking the queue and ensuring no events age out due to retry exhaustion.
Key principle: Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
✗
Increase the Lambda timeout so each invocation can wait longer for the payment API.
Why it's wrong here
A longer timeout does not provide buffering. If the payment API remains unavailable, invocations stay occupied longer and the backlog becomes harder to drain.
✓
Put an Amazon SQS queue between EventBridge and the consumer, and have workers drain the queue with a DLQ for poison messages.
Why this is correct
SQS is the right durability and buffering layer for this requirement. EventBridge can publish orders.checkout events to a queue, and workers can consume them at a controlled rate even when the payment API is unavailable. This decouples event ingestion from downstream processing, absorbs bursts, and preserves events until the outage ends. A DLQ provides a safe landing zone for messages that continue to fail after retries so they are not silently dropped.
Clue confirmation
The clue word "best" in the question point toward this answer.
Related concept
Read the scenario before looking for a memorised answer.
✗
Switch the target to a Lambda function with reserved concurrency of zero during outages.
Why it's wrong here
Reserved concurrency of zero stops processing entirely and does not create durable buffering. It would make the backlog worse and does not satisfy the requirement to preserve events during an outage.
✗
Replace EventBridge with CloudWatch Logs subscriptions so the consumer can poll the log stream later.
Why it's wrong here
CloudWatch Logs subscriptions are not a durable application messaging pattern and are not a substitute for queue-based buffering in this scenario.
Common exam traps
Common exam trap: answer the scenario, not the keyword
The trap here is that candidates often assume increasing timeouts or concurrency adjustments can fix backpressure issues, but they fail to recognize that decoupling with a durable queue is the only way to preserve events during extended downstream outages without losing them to retry expiration.
Trap categories for this question
Scenario analysis trap
CloudWatch Logs subscriptions are not a durable application messaging pattern and are not a substitute for queue-based buffering in this scenario.
Detailed technical explanation
How to think about this question
Under the hood, EventBridge uses a synchronous invocation model for Lambda targets, meaning if the Lambda function times out or throttles, EventBridge retries the delivery up to its maximum retry policy (default 24 hours) before discarding the event. By inserting an SQS queue as an asynchronous buffer, you decouple the retry logic from EventBridge’s limited window, allowing workers to process events at their own pace with SQS’s 14-day retention and per-message visibility timeout. The DLQ acts as a safety net for messages that exceed the maximum receives (default 3), ensuring no single failing event blocks the queue indefinitely.
KKey Concepts to Remember
Read the scenario before looking for a memorised answer.
Find the constraint that changes the correct option.
Eliminate answers that are true in general but not in this case.
TExam Day Tips
→Watch for words such as best, first, most likely and least administrative effort.
→Review why wrong options are wrong, not only why the correct option is correct.
Key takeaway
Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.
Real-world example
How this comes up in practice
A startup's cloud architect reviews their monthly bill and notices costs are higher than expected for a long-running batch job. Switching from on-demand instances to Reserved Instances — or using Spot/Preemptible VMs — can reduce compute costs by up to 72 %. Questions like this test whether you understand the tradeoffs between commitment, flexibility, and cost across cloud pricing models.
What to study next
Got this wrong? Here's your next step.
Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.
Design Resilient Architectures — This question tests Design Resilient Architectures — Read the scenario before looking for a memorised answer..
What is the correct answer to this question?
The correct answer is: Put an Amazon SQS queue between EventBridge and the consumer, and have workers drain the queue with a DLQ for poison messages. — Option B is correct because introducing an SQS queue between EventBridge and the consumer decouples the event delivery from the downstream payment API. During outages, events are stored durably in SQS and can be processed later without being lost. A Dead Letter Queue (DLQ) captures events that fail repeatedly, preventing poison messages from blocking the queue and ensuring no events age out due to retry exhaustion.
What should I do if I get this SAA-C03 question wrong?
Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.
Are there clue words in this question I should notice?
Yes — watch for: "best". Signals that multiple options may be partially correct. Choose the option that most directly solves the exact problem described, not the one that sounds most complete.
What is the key concept behind this question?
Read the scenario before looking for a memorised answer.
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
This SAA-C03 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SAA-C03 exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.