AZ-900 Describe cloud concepts Practice Question
A company runs a legacy application on-premises that cannot be migrated to the cloud due to strict data sovereignty laws requiring customer data to remain within the country's physical borders. The company wants to use Azure's advanced analytics services to gain insights from the data. They plan to keep the data on-premises but run the analytics workloads in Azure. Which cloud deployment model should they use?
⚠ Common exam trap
Test-takers frequently confuse hybrid cloud with public cloud, assuming that any use of Azure services automatically means a public cloud deployment, but hybrid cloud specifically addresses scenarios where data must remain on-premises due to compliance or regulatory requirements.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Hybrid cloud
The hybrid cloud model is correct because it combines on-premises infrastructure (for data sovereignty compliance) with Azure's public cloud services (for advanced analytics). This allows the company to keep customer data within the country's physical borders while leveraging Azure's analytics workloads, such as Azure Synapse Analytics or Azure Machine Learning, without migrating the data to the cloud.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Public cloud
Why it's wrong here
Pure public cloud deploys all workloads on shared, multi-tenant infrastructure inside Azure datacenters, so the legacy application and its data would have to leave the company's premises. Even if an Azure region in the same country is selected, the data is still stored in Microsoft-managed datacenters rather than staying under the company's physical control, directly violating data sovereignty rules and failing the requirement to keep the legacy app on-premises.
When this WOULD be correct
A company wants to migrate all its workloads to Azure without any on-premises infrastructure and has no data residency or compliance restrictions. They need to use Azure services entirely over the internet.
- ✗
Private cloud
Why it's wrong here
A private cloud is dedicated to a single organization and is typically hosted on-premises or in a colocation facility. While it keeps data on-premises, it does not allow the use of Azure's public cloud analytics services, which is the goal.
When this WOULD be correct
A company must comply with strict data sovereignty laws and also requires complete control over their infrastructure, with no data or workloads ever leaving their on-premises datacenter. They choose to deploy a private cloud using Azure Stack or similar technology to meet both compliance and control needs.
- ✓
Hybrid cloud
Why this is correct
A hybrid cloud connects on-premises infrastructure with public cloud services, enabling the company to keep sensitive data on-premises while using Azure for analytics. This satisfies the data sovereignty requirement and the need for Azure services.
- ✗
Community cloud
Why it's wrong here
Community cloud is a multi-tenant deployment model shared by several organizations with common compliance or regulatory concerns, but it is not designed to combine on-premises infrastructure with Azure services. Its infrastructure is typically hosted off-site by a third party or one of the members, so it neither keeps the legacy application on-premises nor provides the Azure analytics capabilities the company needs. A hybrid cloud is the only model that explicitly interconnects an on-premises environment with Azure.
When this WOULD be correct
A question where multiple organizations (e.g., government agencies or healthcare providers) with shared compliance requirements need to collaborate on a cloud platform that meets their regulatory needs, while keeping sensitive data within a specific community.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The AZ-900 exam frequently reuses these exact scenarios with slightly different constraints.
✓Hybrid cloudCorrect answer▾
Why this is correct
A hybrid cloud connects on-premises infrastructure with public cloud services, enabling the company to keep sensitive data on-premises while using Azure for analytics. This satisfies the data sovereignty requirement and the need for Azure services.
✗Public cloudWrong answer — click to see why▾
Why this is wrong here
A public cloud alone cannot meet the data sovereignty requirement because it would require moving customer data to Azure's cloud infrastructure, which may be located outside the country's borders.
★ When this WOULD be the correct answer
A company wants to migrate all its workloads to Azure without any on-premises infrastructure and has no data residency or compliance restrictions. They need to use Azure services entirely over the internet.
Why candidates choose this
Candidates may think that since Azure is a public cloud provider, using the public cloud is sufficient, overlooking the need to keep data on-premises due to legal constraints.
✗Private cloudWrong answer — click to see why▾
Why this is wrong here
A private cloud would require the company to host Azure services within their own on-premises datacenter, which contradicts the goal of running analytics workloads in Azure while keeping data on-premises. The hybrid model allows data to stay on-premises while using Azure's public cloud for analytics.
★ When this WOULD be the correct answer
A company must comply with strict data sovereignty laws and also requires complete control over their infrastructure, with no data or workloads ever leaving their on-premises datacenter. They choose to deploy a private cloud using Azure Stack or similar technology to meet both compliance and control needs.
Why candidates choose this
Candidates may think 'private cloud' implies keeping data on-premises, but they overlook that private cloud still involves cloud services hosted on-premises, not in Azure's public cloud. The hybrid model is the correct choice for combining on-premises data with public cloud analytics.
✗Community cloudWrong answer — click to see why▾
Why this is wrong here
Community cloud is shared by several organizations with common concerns, not a single organization. This scenario involves one company keeping data on-premises while using Azure analytics, which is a hybrid cloud model, not a community cloud.
★ When this WOULD be the correct answer
A question where multiple organizations (e.g., government agencies or healthcare providers) with shared compliance requirements need to collaborate on a cloud platform that meets their regulatory needs, while keeping sensitive data within a specific community.
Why candidates choose this
Candidates may confuse 'community' with 'hybrid' or think that data sovereignty restrictions imply a shared, restricted cloud environment, but community cloud is for multiple organizations, not a single company's on-premises and cloud integration.
Analysis generated from the official AZ-900blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Go deeper
Related to this question
Learn chapter
What is Cloud Computing?
Key term
Public cloud
A public cloud is a computing model where third-party providers deliver IT resources like servers, storage, and applications over the internet to multiple customers on a pay-as-you-go basis.
Key term
Azure Synapse Analytics
Azure Synapse Analytics is a cloud-based data integration, warehousing, and analytics service that brings together big data and data warehouse capabilities under one platform.
About these practice questions
This AZ-900 question is part of Courseiva's 981-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-900 exam.