FSx for Windows File Server Multi-AZ Resiliency

SOA-C03 By islever Editorial Last updated

Implement highly available and resilient environments.

Short answer

B Create an Amazon FSx for Windows File Server Multi-AZ file system to provide resilient SMB access with automatic cross-AZ replication.

Question

A company is migrating its production file server to AWS. All data that is stored on the file server must remain accessible if an Availability Zone becomes unavailable or when system maintenance is performed. Users must be able to interact with the file server through the SMB protocol Users also must have the ability to manage file permissions by using Windows ACLs.
Which solution will meet these requirements?
  1. Create a single AWS Storage Gateway file gateway.
  2. Create an Amazon FSx for Windows File Server Multi-AZ file system. Correct Answer
  3. Deploy two AWS Storage Gateway file gateways across two Availability Zones. Configure an Application Load Balancer in front of the file gateways.
  4. Deploy two Amazon FSx for Windows File Server Single-AZ 2 file systems Configure Microsoft Distributed File System Replication (DFSR).

Key Takeaways

This question tests the ability to select a storage service that natively supports SMB, Windows ACLs, and automatic cross-AZ replication without manual configuration.

Amazon FSx for Windows File Server provides a fully managed native Windows file share with SMB support and Active Directory integration. Deploying in Multi-AZ mode ensures high availability across Availability Zones.

Common mistake: Many candidates incorrectly choose AWS Storage Gateway because it bridges on-premises protocols to S3, but it lacks built-in Multi-AZ resilience and cannot route SMB through an Application Load Balancer.

Expert Analysis

Why the Answer Is Correct

Amazon FSx for Windows File Server is designed specifically to replace on-premises Windows file servers. It natively supports the SMB protocol and Windows ACLs. By deploying the file system in Multi-AZ mode, AWS automatically replicates data across two Availability Zones within the same region, ensuring that the data remains accessible even if one AZ becomes unavailable or undergoes maintenance.

Why the Other Options Are Wrong

Option A is incorrect because a single Storage Gateway is typically deployed in one location and does not offer built-in Multi-AZ redundancy. Option C is incorrect because an Application Load Balancer (ALB) operates at Layer 7 (HTTP/HTTPS) and cannot load balance SMB traffic, which runs over TCP ports 445/139. Option D involves DFSR, which adds significant complexity and latency compared to the native, synchronous replication provided by FSx Multi-Az.

Community Comment Notes

As BAL007RAJ noted, "Windows file share + SMB + Active Directory/ACLs = FSx for Windows." Another user, Derel1ct, emphasized that "An ALB is designed specifically for HTTP/S traffic, it can't route SMB traffic," highlighting why option C fails technically.

Exam Strategy

When a question requires both SMB access and high availability across zones, look for Amazon FSx for Windows File Server configured in Multi-AZ. Avoid solutions involving ALBs for non-HTTP protocols or complex replication tools like DFSR when a managed service offers native resiliency.

Frequently Asked Questions

Can I use an Application Load Balancer for SMB traffic?

No, ALBs only support HTTP/HTTPS traffic. SMB uses different ports and protocols not supported by standard load balancers.

Why is Storage Gateway not suitable for this scenario?

Storage Gateway primarily caches data locally and stores it in S3; it does not offer native Multi-AZ redundancy for the gateway instance itself.

More SOA-C03 FAQ →

Discussion 2 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 2

  1. Derel1ct 👍 1 Answered B
    A. A single Storage Gateway exists only in one AZ, which does not provide the required resiliency for AZ failure. C. An ALB is designed specifically for HTTP/S traffic, it can't route SMB traffic. D. DFSR would work but it's adding extra unnecessary overhead and complexity when FSx for Windows FS configured in Multi-AZ already handles replication.
  2. BAL007RAJ 👍 1 Answered B
    Windows file share + SMB + Active Directory/ACLs = FSx for Windows. AZ failure protection = Multi-AZ deployment.

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Resolving Private IPv4 Exhaustion in AWS VPCs

S-grade

How Do You Ramp ALB Traffic Gradually During EC2 Cache Warm-Up?

S-grade

Avoiding Permanent Credentials with AWS STS

S-grade

Automate EC2 Reboot with Systems Manager Maintenance Windows

S-grade

Practice All SOA-C03 Questions

Access 100 questions with complete answers and detailed explanations.

View Full SOA-C03 Practice Test →

← Back to SOA-C03 Study Guide