Workload requirements: - Processes regulated customer records - Should not share underlying compute with other tenants if avoidable - Team wants provider-managed hardware maintenance - Application will run in a public cloud
Based on the exhibit, which cloud deployment choice best satisfies the workload requirements?
Exhibit: Workload requirements: - Processes regulated customer records - Should not share underlying compute with other tenants if avoidable - Team wants provider-managed hardware maintenance - Application will run in a public cloud
Which deployment choice is the best fit?
Answer choices
Good practice is not just finding the correct option. The wrong answers often show the exact trap the exam wants you to fall into.
Shared public tenancy on standard virtual machines.
Shared tenancy is common and cost-effective, but it does not provide the strongest practical isolation for regulated workloads. Multiple customers can still share the same underlying physical environment, which is less aligned with the requirement.
Community cloud shared with other regulated organizations.
A community cloud can help organizations with similar needs, but it still involves sharing resources with other parties. That does not best meet the requirement for avoiding shared underlying compute when possible.
Public cloud with a dedicated host or equivalent single-tenant compute placement.
This is the best match because it gives the organization stronger tenant isolation while still using provider-managed cloud infrastructure. A dedicated host or similar single-tenant placement reduces exposure to neighboring tenants and is well suited for regulated data without requiring the customer to buy and maintain physical servers. It balances security and operational convenience.
On-premises private cloud with company-owned servers and full hardware management.
This may offer strong control, but it violates the requirement to keep provider-managed hardware maintenance in a public cloud. It also shifts the organization into hardware ownership and maintenance responsibilities.
Common exam trap
Many certification questions include familiar terms but test a specific constraint. Read the exact wording before choosing an answer that is generally true but wrong for this case.
Technical deep dive
This question should be treated as a scenario, not a definition check. Identify the problem, the constraint and the best action. Then compare each option against those facts.
Related practice questions
Use these pages to review the topic behind this question. This is how one missed question becomes focused revision.
Practise SY0-701 questions linked to Security+ social engineering questions.
Practise SY0-701 questions linked to Security+ cryptography.
Practise SY0-701 questions linked to Security+ IAM questions.
Practise SY0-701 questions linked to Security+ risk management questions.
Practise SY0-701 questions linked to Security+ incident response questions.
Practise SY0-701 questions linked to Security+ malware questions.
Practise SY0-701 questions linked to Security+ vulnerability management questions.
Practise SY0-701 questions linked to Security+ security operations questions.
Practise SY0-701 questions linked to Security+ zero trust questions.
Practise SY0-701 questions linked to Security+ authentication factors questions.
Keep practising from the same exam bank, or move into a focused topic page if this question exposed a weak area.
Question 1
Question 2
Question 3
Question 4
Question 5
Question 6
FAQ
Read the scenario before looking for a memorised answer.
The correct answer is: Public cloud with a dedicated host or equivalent single-tenant compute placement. — The workload needs stronger tenant isolation than ordinary shared public cloud instances, but the organization also wants the provider to maintain the hardware. A dedicated host or equivalent single-tenant compute option in a public cloud fits both goals. It keeps the workload on cloud infrastructure while reducing the chance that other customers share the same physical compute resources. Why others are wrong: Option A uses shared tenancy, which does not best meet the isolation requirement. Option B still implies shared resources with a community. Option D offers control but moves the company away from provider-managed hardware and into a private infrastructure model.
Then try more questions from the same exam bank and focus on understanding why the wrong options are tempting.
Sign in to join the discussion.