Disaster recovery is a signature SAA-C03 pattern, and it is almost always a selection problem: a scenario states an RTO, an RPO and a cost posture, and asks which of four strategies fits. Get the two objectives straight, then pick the cheapest rung that meets them.
RTO vs RPO
Two numbers, two axes:
- RPO (Recovery Point Objective) — the maximum acceptable data loss, as a point in time. RPO of 5 minutes = lose at most the last 5 minutes.
- RTO (Recovery Time Objective) — the maximum acceptable downtime, how long recovery may take.
The exam routinely offers the wrong one as a distractor, so read the question’s phrasing carefully: “how much data can we lose” is RPO; “how long can we be down” is RTO.
The ladder, cheapest to fastest
- Backup and restore — only backups kept; rebuild at recovery time. RTO in hours, lowest cost.
- Pilot light — data replicated, only the core (the database) kept running; the rest provisioned at failover. RTO in tens of minutes.
- Warm standby — a scaled-down but fully functional copy always running, scaled up on failover. RTO in minutes.
- Multi-site active-active — both Regions serve live traffic. Near-zero RTO and RPO, highest cost.
The selection rule
Pick the cheapest strategy that satisfies the numbers — not the fastest on the list. Warm standby beating a stated RTO does not make it right when pilot light also meets it for less. Overshooting the requirement at extra standing cost is the most elegant trap this topic sets. And do not confuse a Multi-AZ deployment (which survives an Availability Zone failure inside one Region) with a cross-Region DR strategy — they solve different failures.
Centralising backups
When the scenario is about backups themselves — policies, scheduling, monitoring, cross-Region copy across EBS, RDS, DynamoDB and more — the answer is AWS Backup, which manages all of it centrally instead of per-service snapshots by hand.
How to use the six scenarios below
Answer each one before opening the explanation, and when you miss, name the number that decided it — the RTO, the RPO, or the cost ceiling — and check you did not overshoot. Every explanation states the deciding constraint and dismantles the distractors, which are usually a neighbouring rung on the ladder. For the domain overview, see Design Resilient Architectures.
Updated for SAA-C03 (July 2026). The sample questions above are our own work
in the style of the exam — not real exam items. The exam itself is set and marked
by the certification body.