AZ-900Chapter 11 of 127Objective 2.1

Azure Regions and Geographies

This chapter explains Azure Regions and Geographies, the foundational building blocks of Microsoft's global cloud infrastructure. Understanding how Azure physically organizes its data centers is critical for the AZ-900 exam, as questions on region pairs, sovereign clouds, and latency optimization appear frequently. This objective area (Azure Architecture Services) carries approximately 20-25% of the exam weight, and region/geography concepts are a consistent 3-5 questions. By the end of this chapter, you will know how to select regions for compliance, performance, and disaster recovery, and you will be able to identify the traps the exam sets around paired regions and special clouds like Azure Government.

25 min read
Beginner
Updated May 31, 2026

Azure Regions as Global Warehouse Network

Imagine your company runs a chain of premium bakeries. Each bakery needs fresh ingredients daily. You could source everything from a single central warehouse in New York, but that means your Tokyo bakery gets stale flour and your London bakery pays huge shipping fees. Worse, if the New York warehouse floods, every bakery shuts down. Azure Regions solve this by placing identical, fully-stocked warehouses (data centers) in cities worldwide—North America, Europe, Asia, Australia, and more. Each warehouse is independent: it has its own power, cooling, networking, and inventory of compute, storage, and database ingredients. When a bakery in Sydney orders a virtual machine (a batch of dough), it pulls from the nearby Australia East warehouse, minimizing delivery time (latency) and avoiding cross-ocean shipping costs (data transfer fees). The warehouses are grouped into larger geographic territories (Azure Geographies) that respect local laws—for example, a warehouse in France can only serve customers in the European Union, ensuring data sovereignty. If a warehouse in Brazil South suffers a power outage, bakeries in that region can switch to a paired warehouse in Brazil Southeast, which is at least 300 km away and has separate power grids and flood plains. This pairing ensures high availability without needing to replicate across continents. Just as you wouldn't build a single warehouse for a global bakery chain, Azure doesn't rely on one data center—its global network of regions provides scale, compliance, and disaster recovery that on-premises infrastructure cannot match.

How It Actually Works

What Are Azure Regions and Why Do They Matter?

An Azure Region is a set of data centers deployed within a latency-defined perimeter and connected through a dedicated regional low-latency network. Think of it as a single metropolitan area where Microsoft has built multiple physical data centers. Each region is independent and self-contained, meaning it has its own power, cooling, networking, and compute resources. As of 2025, Azure has over 60 regions worldwide, more than any other cloud provider.

The business problem Azure Regions solve is simple: if you run your application in a single data center, a power outage, network cut, or natural disaster can take your entire business offline. By distributing resources across multiple regions, you achieve high availability, disaster recovery, and low latency for users around the world. For example, a gaming company might deploy its game servers in West Europe for European players and East Asia for Asian players, ensuring each user gets sub-50ms response times.

How Regions Work: The Mechanism

Each Azure Region is a collection of one or more data centers. The data centers within a region are connected by a high-speed, low-latency fiber network, typically with a latency of less than 2 milliseconds between them. This allows you to deploy services like Azure SQL Database across multiple data centers in the same region for redundancy, yet still maintain synchronous replication.

Behind the scenes, Microsoft manages the physical infrastructure. When you create a resource in a region, Azure automatically allocates it to one of the data centers in that region based on capacity and health. You never choose the specific data center—you only choose the region. For example, if you create a virtual machine in East US, Azure places it in one of the several data centers that make up the East US region.

Key Components: Region Pairs, Geographies, and Availability Zones

Region Pairs: Each Azure Region is paired with another region within the same geography (e.g., East US is paired with West US). The pair is at least 300 miles (480 km) apart to ensure geographic separation from natural disasters. In the event of a major disaster, Microsoft will prioritize restoring at least one region in each pair. Region pairs also enable services like Azure Storage geo-redundant storage (GRS), which automatically replicates data to the paired region. The exam expects you to know that region pairs are fixed and cannot be changed.

Geographies: A Geography is a discrete market that contains one or more Azure Regions. Each geography preserves data residency and compliance boundaries. For example, the United States geography includes multiple regions like East US, West US, Central US, etc. Data can be replicated within a geography, but not outside it without explicit customer configuration. Geographies are important for customers with data sovereignty requirements, such as European Union companies that must keep data within the EU.

Availability Zones: Within a region, you can use Availability Zones—physically separate data centers with independent power, cooling, and networking. Each zone is essentially a separate data center within the same region. By deploying resources across multiple zones, you protect against data center failures without needing to replicate to a different region. Not all regions support Availability Zones; the exam tests that you know which regions have three or more zones.

Pricing and SLA Considerations

Regions themselves are free to use—you don't pay extra for choosing a particular region. However, data transfer costs vary: moving data between regions incurs egress charges, while data transfer within a region is often free. The SLA for virtual machines deployed across two Availability Zones is 99.99%, compared to 99.95% for a single instance. Region-paired deployments can achieve even higher availability but require more complex architectures.

Comparison to On-Premises

In an on-premises data center, you own the physical building, power, cooling, and networking. You are limited to a single location, making disaster recovery expensive (you need a second site). With Azure Regions, you get access to dozens of global locations without building anything. You can replicate data to a paired region automatically, and you can deploy globally with a few clicks. The trade-off is that you lose control over the exact data center and must trust Microsoft's physical security and operations.

Azure Portal and CLI Touchpoints

In the Azure portal, when creating any resource, the first required selection is the region. The portal shows a map with region locations and indicates which regions support Availability Zones. You can also use the Azure CLI to list regions:

az account list-locations --output table

This command returns a table of all regions, their display names, and whether they are paired. When creating a resource, you specify the region with the --location parameter:

az vm create --resource-group myGroup --name myVM --location eastus --image UbuntuLTS

Concrete Business Scenarios

Global E-commerce: A retailer deploys its web app in multiple regions (West Europe, East US, Southeast Asia) to serve customers with low latency. They use Azure Traffic Manager to route users to the nearest region. If one region fails, traffic automatically shifts to another.

Data Sovereignty: A German bank must keep customer data within the European Union. They choose the West Europe (Netherlands) and North Europe (Ireland) regions, both in the Europe geography. They enable geo-replication only within these regions to comply with GDPR.

Disaster Recovery: A healthcare company runs its critical database in East US. They configure geo-redundant storage to automatically replicate to West US (the paired region). If a hurricane hits East US, they failover to West US with minimal data loss.

Walk-Through

1

List Available Azure Regions

Use the Azure CLI command `az account list-locations --output table` to see all regions. The output includes the region name (e.g., eastus), display name (e.g., East US), and paired region. This step is useful for verifying which regions are available to your subscription, as some regions may be restricted for certain account types (e.g., trial subscriptions cannot access some regions). Behind the scenes, Azure queries the global infrastructure database and returns only regions where you have quota. The exam may test that you can identify regions from a list, so practice recognizing names like 'westeurope' and 'southeastasia'.

2

Select a Region for a New Resource

When creating a resource in the portal, the region dropdown lists all available regions. For production workloads, choose a region close to your users to minimize latency. Also consider whether the region supports Availability Zones if you need high availability. The portal shows a checkmark next to regions that support zones. For example, East US supports zones, but West US (classic) does not. If you select a region without zones, you cannot later add zone redundancy. The exam often tests that you must choose a zone-supporting region upfront.

3

Configure Geo-Redundancy for Storage

In Azure Storage, you can choose replication type: Locally Redundant (LRS), Zone Redundant (ZRS), Geo-Redundant (GRS), or Read-Access Geo-Redundant (RA-GRS). To use region pairs, select GRS or RA-GRS. When you create a storage account in East US and choose GRS, Azure automatically replicates your data to West US (the paired region). Behind the scenes, Azure writes synchronously to three copies in the primary region, then asynchronously copies to the paired region. The exam expects you to know the default replication is LRS and that GRS uses the paired region.

4

Deploy Resources Across Availability Zones

To protect against a data center failure within a region, deploy your VMs, managed disks, and load balancers across two or three Availability Zones. In the portal, when creating a VM in a zone-supporting region (e.g., East US 2), you can select Zone 1, Zone 2, or Zone 3. For high availability, create three VMs, each in a different zone, and place them behind a load balancer. Azure ensures each zone is an isolated fault domain with separate power and cooling. The exam tests that zones are unique within a region and that not all regions have zones.

5

Implement Disaster Recovery with Region Pairs

For critical workloads, use Azure Site Recovery to replicate VMs from one region to its paired region. In the portal, you enable replication and select the target region (auto-populated as the paired region). Azure then continuously replicates VM data to the target region. During a disaster, you can failover to the target region with a single click. Behind the scenes, Azure uses the low-latency network between paired regions to keep replication lag minimal. The exam tests that region pairs are fixed—you cannot pair arbitrary regions.

What This Looks Like on the Job

Scenario 1: Global SaaS Provider A company providing project management software serves customers in North America, Europe, and Asia. They deploy their application in three regions: East US, West Europe, and Southeast Asia. They use Azure Front Door to route users to the nearest region, automatically failing over if a region becomes unhealthy. The team configures geo-replication for their Azure SQL Database to ensure each region has a readable copy. Cost considerations include data egress fees between regions—they minimize cross-region data transfer by keeping user data local. When they initially deployed only in East US, users in Asia experienced >300ms latency, causing poor adoption. After adding Southeast Asia, latency dropped to <50ms for Asian users. A common mistake is assuming all regions offer the same services—they discovered that some newer services (e.g., certain GPU VMs) were not available in Southeast Asia, forcing them to use a nearby region like East Asia instead.

Scenario 2: Financial Services Compliance A Canadian bank must keep customer data within Canada due to regulatory requirements. They choose the Canada Central (Toronto) and Canada East (Quebec City) regions, both in the Canada geography. They configure geo-redundant storage between these two regions, which are paired. This ensures data never leaves Canada even during disaster recovery. The team also uses Azure Policy to restrict resource creation to only Canadian regions. A pitfall: they initially considered using the US regions for backup, but that would violate compliance. They also learned that Canada East does not support Availability Zones, so they had to use Canada Central for zone-redundant deployments. The cost of geo-replication is roughly double that of locally redundant storage, but they accept it for compliance.

Scenario 3: E-commerce Disaster Recovery An online retailer runs its main workload in West Europe. For disaster recovery, they replicate to North Europe (the paired region) using Azure Site Recovery. They test failover quarterly by performing a planned failover to North Europe, running the site for a day, then failing back. During one test, they discovered that their custom domain DNS was still pointing to the West Europe IP address, causing users to hit a dead site. They now use Azure Traffic Manager with priority routing: primary endpoint is West Europe, secondary is North Europe. When they failover, they update the priority to make North Europe primary. The cost of running a standby environment in the paired region is significant—they keep a minimal footprint (smaller VMs) and scale up only during a real disaster.

How AZ-900 Actually Tests This

Objective Code: AZ-900: Describe Azure architecture and services (20-25%). Specifically: describe regions, region pairs, and sovereign regions.

What AZ-900 Tests: - You must be able to define a region (a set of data centers in a latency-defined perimeter). - You must know that each region is paired with another region in the same geography (e.g., East US with West US). - You must know the purpose of region pairs: disaster recovery, geo-redundancy, and prioritized restoration. - You must identify sovereign regions (Azure Government, Azure China 21Vianet, Azure Government Secret, etc.) and understand that they are physically isolated for compliance. - You must know that Availability Zones are separate data centers within a region, and that not all regions support them. - You must know that data residency is preserved within a geography.

Common Wrong Answers and Why: 1. *'All regions support Availability Zones.'* → Wrong. Only about one-third of regions support zones. The exam may list regions and ask which support zones. Candidates choose incorrectly because they assume zones are universal. 2. *'A region is a single data center.'* → Wrong. A region contains multiple data centers. The exam may describe a region as 'a single physical building' to trap you. 3. *'Region pairs are chosen by the customer.'* → Wrong. Region pairs are fixed by Microsoft. Candidates think they can pair any two regions because they are used to choosing manually in other contexts. 4. *'Data can be replicated to any region outside the geography.'* → Wrong. By default, data stays within the geography unless you explicitly configure cross-geography replication (which incurs additional cost and compliance risks).

Specific Terms and Values: - Region pair distance: at least 300 miles (480 km). - Number of Azure regions: 60+ (as of 2025). - Azure Government: separate instance for US government agencies. - Azure China: operated by 21Vianet, physically separated from the rest of Azure. - Default storage replication: Locally Redundant Storage (LRS) – three copies within a single data center.

Edge Cases: - Some regions are 'paired' but not in a reciprocal way (e.g., Brazil South is paired with South Central US). - Azure Government has its own pairings (e.g., US Gov Virginia with US Gov Texas). - Not all services are available in all regions. The exam may ask why a service cannot be deployed in a certain region – answer is 'service not available in that region'.

Memory Trick: 'RAP' – Region, Availability Zone, Paired region. Think: Region is the city, Availability Zone is a specific building in that city, Paired region is a sister city 300 miles away. For exam questions, ask yourself: 'Is this about geographic separation (region pair) or within a city (zones)?' If the scenario mentions a single region but multiple data centers, it's zones. If it mentions two distant locations, it's region pairs.

Key Takeaways

An Azure Region is a set of data centers within a latency-defined perimeter, not a single data center.

Region pairs are fixed and at least 300 miles apart; East US pairs with West US, West Europe pairs with North Europe.

Availability Zones provide high availability within a region, but only about one-third of regions support them.

Geographies preserve data residency and compliance boundaries; data does not leave a geography by default.

Azure Government and Azure China 21Vianet are sovereign clouds, physically isolated from the public Azure cloud.

The default storage replication is Locally Redundant Storage (LRS) – three copies in one data center.

When creating a resource, you must select a region; not all services are available in all regions.

Region pairs are used for disaster recovery and geo-redundant storage.

Easy to Mix Up

These come up on the exam all the time. Here's how to tell them apart.

Availability Zones

Within a single region

Distance: 1-2 miles apart

Protects against data center failure

Latency: <2ms between zones

Supports synchronous replication

Region Pairs

Two separate regions

Distance: at least 300 miles apart

Protects against regional disaster

Latency: typically <10ms (fiber)

Supports asynchronous replication

Watch Out for These

Mistake

All Azure regions are identical in terms of services and pricing.

Correct

Not all services are available in every region. For example, certain GPU VMs or specific SKUs may only be in larger regions like East US or West Europe. Pricing also varies slightly by region due to local electricity and tax costs.

Mistake

A region pair means data is automatically replicated for all services.

Correct

Only specific services like Azure Storage (when configured with GRS) and Azure Site Recovery automatically replicate data to the paired region. Most services require manual configuration for cross-region replication.

Mistake

Availability Zones are the same as region pairs.

Correct

Availability Zones are separate data centers within a single region, typically 1-2 miles apart. Region pairs are two separate regions hundreds of miles apart. Zones protect against data center failure; pairs protect against regional disasters.

Mistake

You can choose any two regions to be paired for your subscription.

Correct

Region pairs are predetermined by Microsoft. For example, East US is always paired with West US. You cannot change the pairing. This is a common exam trap.

Mistake

Azure Government regions are part of the public Azure cloud.

Correct

Azure Government is a physically isolated instance of Azure, separate from the public cloud, operated by screened US personnel. It is not accessible from the public Azure portal and has different compliance certifications.

Frequently Asked Questions

What is the difference between a region and an Availability Zone?

A region is a geographic area containing multiple data centers, while an Availability Zone is a single data center within that region. Zones are physically separate with independent power and cooling. Deploying across zones protects against data center failure, while deploying across regions protects against regional disasters. On the exam, if the question mentions 'multiple data centers in one city,' think zones; if 'two cities far apart,' think region pairs.

How many Azure regions are there?

As of 2025, Azure has over 60 regions worldwide, more than any other cloud provider. The exact number grows each year. For the exam, you don't need to memorize the count, but you should know it's the largest global infrastructure. The exam may state 'more than 60 regions' as a fact.

Can I change the region of an existing resource?

No, you cannot change the region of an existing resource. You must delete and recreate it in the new region. For data migration, you can use Azure Site Recovery or Azure Database Migration Service to move resources between regions. The exam tests that region is immutable after creation.

What is a sovereign region in Azure?

A sovereign region is a physically isolated instance of Azure dedicated to a specific government or entity. Examples include Azure Government (for US agencies), Azure China 21Vianet (operated by a Chinese company), and Azure Government Secret/DoD. These regions have separate portals, compliance certifications, and are not connected to the public Azure cloud.

What is the purpose of region pairs?

Region pairs provide disaster recovery and geo-redundancy. Microsoft ensures that paired regions are at least 300 miles apart to reduce the risk of a single disaster affecting both. In the event of a major disaster, Microsoft will prioritize restoring at least one region in each pair. Services like Azure Storage GRS automatically replicate data to the paired region.

Are all Azure services available in every region?

No. Newer or specialized services may only be available in larger regions initially. For example, certain GPU VM sizes or Azure Cognitive Services features may be limited. You can check service availability per region on the Azure Products by Region page. The exam may ask why a service can't be deployed in a chosen region—answer: the service is not available there.

What is the default replication option for Azure Storage?

The default is Locally Redundant Storage (LRS), which replicates data three times within a single data center. You can choose other options like ZRS (zone-redundant), GRS (geo-redundant), or RA-GRS. The exam tests that LRS is the default and cheapest, but offers no protection against data center failure.

Terms Worth Knowing

Ready to put this to the test?

You've just covered Azure Regions and Geographies — now see how well it sticks with free AZ-900 practice questions. Full explanations included, no account needed.

Done with this chapter?