Amazon Web Services Updated SAA-C03 Exam Questions and Answers by hayley

The correct answer isBbecause the company needs tocentrally manage backups across multiple AWS accounts, improvedisaster recovery posture, and protect backups fromaccidental deletion or compromise of an AWS account.AWS Backup policies in AWS Organizationsprovide centralized governance and automation for backup plans across member accounts. By storing copies of backups inadditional AWS accounts, the company gains stronger isolation and protection against account-level compromise.

Cross-account backup copies are especially important when the requirement includes protection from a malicious attack on an AWS account. If backups remain only in the same account, an attacker with sufficient permissions in that account could potentially alter or delete them. Storing backup copies in a separate account provides administrative separation and strengthens recovery options. This is a recognized AWS best practice for improving cyber resilience and recovery assurance.

Option A is incorrect because copying backups to additional Availability Zones within the same account does not address centralized management across Organizations or protect against malicious actions in that account. Option C improves regional resilience but still lacks centralized policy-based management and account isolation. Option D provides centralized policy management and cross-Region resilience, but it does not directly address the requirement to protect against an attack on a single AWS account as effectively ascross-account backup copies.

AWS guidance for enterprise backup strategy emphasizescentralized backup management with AWS Backup and AWS Organizations, pluscross-account copiesfor stronger protection and recovery. Therefore, usingAWS Backup policies in Organizations to store copies in additional AWS accountsis the best solution.

Using an Application Load Balancer (ALB) allows for integration with AWS WAF to inspect all incoming traffic. Running the application on Amazon ECS provides a scalable and managed container orchestration service. Utilizing Amazon Aurora Serverless for the PostgreSQL database offers automatic scaling based on application demand, which is cost-effective for workloads with variable traffic patterns, such as higher traffic on weekdays and lower traffic on weekends.

AWS Budgets supports budget actions that can automatically apply controls when a threshold is reached. In this case, because the accounts are non-production, it is appropriate to enforce a hard control by applying an SCP to the OU to deny additional usage and to stop running EC2 instances through a notification-driven workflow. AWS documentation describes AWS Budgets as the service for setting cost thresholds and taking automated actions, which makes it more appropriate than Cost Explorer reporting, CloudWatch alarms, or Cost Anomaly Detection for direct budget enforcement. Since the requirement is to prevent the team from exceeding the project budget, the budget-action-based control is the strongest solution.

Amazon S3 is designed for durability, scalability, and millisecond access. For small monthly data volumes (300 MB), S3 Standard is cost-effective and provides immediate access. To meet 30-day retention, Lifecycle policies can automatically expire objects after the required time. For disaster recovery, S3 Cross-Region Replication (CRR) copies objects across Regions to a backup bucket, ensuring data resiliency. OpenSearch (A) is not needed because the requirement is storage and retrieval, not indexing. Aurora or RDS options (C, D) add unnecessary complexity and cost, as a relational database is not required for JSON storage and millisecond retrieval. Therefore, option B provides the simplest, most resilient, and cost-optimized solution.