Multi-AZ is the resilience feature the SAA-C03 returns to most, and its scenarios almost always turn on one line: availability versus scaling. Get that line right and the distractors — usually a read replica or a resize offered where availability belongs — fall away.
Standby is not a read node
A Multi-AZ standby is a passive failover target. It is not readable, it accepts no traffic, and it exists solely to take over if the primary’s Availability Zone fails. So when a scenario asks you to offload reads onto the standby, the answer is no — add read replicas, which are separate, readable instances built for exactly that. The exam plants this because “there’s a whole second instance sitting there, why not read from it?” feels reasonable. It is the wrong copy.
What failover is — and is not
Multi-AZ fails over on availability events: an AZ outage, a primary instance or storage failure, or a maintenance operation like patching. It does not fail over because the database is busy. Sustained read load is a performance problem, and the answer to a performance problem lives in replicas or caching, never in Multi-AZ. Watching for “failure” versus “load” in the stem tells you which family of answers to reach for.
Why it protects committed data
Replication to the standby is synchronous — a transaction commits only once it is written to both instances — so a failover loses essentially no committed data. That near-zero RPO is why Multi-AZ is the right call for finance and other data-sensitive workloads. Contrast it with a read replica’s asynchronous replication, which can lag and is therefore about scaling and DR, not zero-loss availability.
The Region line
Multi-AZ lives entirely inside one Region — it survives an AZ loss, not a Region loss. When the requirement is to bring the database up in a second Region, the answer is a cross-Region read replica you promote during a disaster. Adding AZs or resizing keeps you inside the Region that failed. Single-Region availability is Multi-AZ; multi-Region DR is a cross-Region replica.
Two managed helpers
Two services round out the common scenarios. RDS Proxy pools connections and holds them steady through a failover — the answer when a serverless or spiky app suffers connection storms and slow recovery. And Aurora changes the shape of the question: its Replicas are readable and are failover targets at the same time, sharing distributed storage, so Aurora delivers read scaling and automatic failover from the same instances instead of a separate idle standby.
How to use the six scenarios below
Answer each one before opening the explanation, and when you miss, find the requirement word that decided it — “automatic”, “readable”, “least data loss”, “second Region”. Every explanation names that constraint and takes the distractors apart. The recurring trap is a mechanism that genuinely works but answers scaling when the question asked for availability, or the reverse. For the domain overview, see Design Resilient Architectures.
Updated for SAA-C03 (July 2026). The sample questions above are our own work
in the style of the exam — not real exam items. The exam itself is set and marked
by the certification body.