Question 351 of 1,013
SY0-701 Security Architecture Practice Question
Exhibit
Workload requirements: - Processes regulated customer records - Should not share underlying compute with other tenants if avoidable - Team wants provider-managed hardware maintenance - Application will run in a public cloud
Based on the exhibit, which cloud deployment choice best satisfies the workload requirements?
Exhibit: Workload requirements: - Processes regulated customer records - Should not share underlying compute with other tenants if avoidable - Team wants provider-managed hardware maintenance - Application will run in a public cloud
Which deployment choice is the best fit?
⚠ Common exam trap
Many candidates confuse 'community cloud' (Option B) as meeting isolation needs, but it still involves multi-tenant compute sharing unless explicitly configured with dedicated hosts, which is not stated in the option.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Public cloud with a dedicated host or equivalent single-tenant compute placement.
A dedicated host or single-tenant compute placement in a public cloud ensures the workload does not share underlying physical hardware with other tenants, meeting the 'should not share underlying compute' requirement. It also provides provider-managed hardware maintenance and runs in a public cloud, aligning with all stated workload requirements for processing regulated customer records.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Shared public tenancy on standard virtual machines.
Why it's wrong here
Shared tenancy is common and cost-effective, but it does not provide the strongest practical isolation for regulated workloads. Multiple customers can still share the same underlying physical environment, which is less aligned with the requirement.
- ✗
Community cloud shared with other regulated organizations.
Why it's wrong here
A community cloud for regulated organizations still relies on shared compute and storage resources among multiple tenants, even if the tenants share similar compliance goals. The underlying hosts are not dedicated to a single customer, so the requirement to avoid shared underlying compute where possible is not satisfied. In fact, bringing together multiple regulated organizations can expand the attack surface and complicate compliance boundary enforcement compared to a single-tenant dedicated host.
- ✓
Public cloud with a dedicated host or equivalent single-tenant compute placement.
Why this is correct
This is the best match because it gives the organization stronger tenant isolation while still using provider-managed cloud infrastructure. A dedicated host or similar single-tenant placement reduces exposure to neighboring tenants and is well suited for regulated data without requiring the customer to buy and maintain physical servers. It balances security and operational convenience.
- ✗
On-premises private cloud with company-owned servers and full hardware management.
Why it's wrong here
An on-premises private cloud with company-owned servers directly contradicts the requirement to keep provider-managed hardware maintenance in a public cloud. It forces the organization to assume physical security, patching, and hardware lifecycle responsibilities, increasing operational burden and capital expense. While it offers strong isolation from other cloud tenants, it fails the stated need for provider-managed infrastructure and is thus not the best deployment choice.
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
Last reviewed: Jun 11, 2026
This SY0-701 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SY0-701 exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.