Question 524 of 981
Understanding Hybrid Cloud Architecture
A company has a legacy on-premises application that processes sensitive financial data. Due to regulatory requirements, certain data cannot leave the company's on-premises data center. However, the company wants to take advantage of the cloud's scalability for the application's compute-intensive batch processing jobs. The batch jobs need to access the sensitive data but must process it without the data ever being stored in the cloud. The batch jobs will be orchestrated from the cloud. Which cloud deployment model best describes this architecture?
Quick Answer
The answer is hybrid cloud. This architecture is correct because it combines on-premises infrastructure for sensitive financial data with public cloud resources for compute-intensive batch processing, orchestrated from the cloud while ensuring data never leaves the local data center. On the Microsoft Azure Fundamentals AZ-900 exam, this scenario tests your understanding of how hybrid cloud deployment models solve regulatory and data residency challenges by enabling workload portability across private and public environments. A common trap is mistaking this for public cloud alone, but the key distinction is that sensitive data must remain on-premises, making hybrid the only viable choice. Remember the memory tip: “Hybrid holds the data home; the cloud does the heavy lifting.”
⚠ Common exam trap
Candidates often confuse hybrid cloud with multi-cloud, thinking that using multiple cloud providers automatically qualifies as hybrid, but hybrid cloud specifically requires a mix of on-premises and cloud resources, not just multiple public clouds.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Hybrid cloud
This architecture is a hybrid cloud because it combines on-premises infrastructure (where sensitive data resides and must remain) with public cloud resources (for compute-intensive batch processing). The batch jobs are orchestrated from the cloud but access the sensitive data on-premises without storing it in the cloud, which is a classic hybrid deployment pattern. Hybrid cloud enables workload portability and orchestration across private and public environments while meeting data residency and regulatory requirements.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Public cloud
Why it's wrong here
A public cloud model would run all workloads (including data storage) in the cloud. This would violate the regulatory requirement that sensitive data cannot leave the on-premises data center, so this is incorrect.
When this WOULD be correct
A company wants to run a web application with no compliance or data residency constraints, and needs to minimize capital expenditure by using shared infrastructure that scales on demand. The application and its data can be fully hosted in the cloud provider's data centers.
- ✗
Private cloud
Why it's wrong here
Private cloud fails because it does not provide the public cloud's scalability for compute-intensive batch processing, as the scenario explicitly requires leveraging "the cloud" for this purpose. A private cloud, by definition, is an isolated environment, typically on-premises or dedicated to a single organisation, and lacks the shared, elastic resources of a public cloud. It is tempting due to the sensitive data requirements, and would be correct if the company intended to build its own cloud infrastructure entirely within its data centre without any public cloud integration.
When this WOULD be correct
A company must keep all data and applications within its own data center due to strict regulatory compliance and has no need for public cloud resources. The architecture uses only on-premises infrastructure managed internally.
- ✓
Hybrid cloud
Why this is correct
A hybrid cloud combines on-premises infrastructure (private cloud) with public cloud services. This allows the company to keep sensitive data on-premises while using public cloud resources for compute-intensive batch jobs, meeting both the scalability and regulatory requirements.
- ✗
Multi-cloud
Why it's wrong here
Multi-cloud refers to using multiple public cloud providers (e.g., AWS and Azure) for different workloads. It does not necessarily involve an on-premises component, and the scenario specifically requires an on-premises data center to hold the sensitive data, so this is incorrect.
When this WOULD be correct
A company wants to use services from two different public cloud providers (e.g., Azure for compute and AWS for storage) to avoid vendor lock-in and leverage best-of-breed services. The question would specify that no on-premises resources are involved, and the goal is to distribute workloads across multiple public clouds.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The AZ-900 exam frequently reuses these exact scenarios with slightly different constraints.
✓Hybrid cloudCorrect answer▾
Why this is correct
A hybrid cloud combines on-premises infrastructure (private cloud) with public cloud services. This allows the company to keep sensitive data on-premises while using public cloud resources for compute-intensive batch jobs, meeting both the scalability and regulatory requirements.
✗Public cloudWrong answer — click to see why▾
Why this is wrong here
A public cloud deployment would store data and run workloads entirely on cloud infrastructure owned by a third-party provider, which violates the regulatory requirement that certain sensitive data cannot leave the on-premises data center.
★ When this WOULD be the correct answer
A company wants to run a web application with no compliance or data residency constraints, and needs to minimize capital expenditure by using shared infrastructure that scales on demand. The application and its data can be fully hosted in the cloud provider's data centers.
Why candidates choose this
Candidates may think that because the batch processing is compute-intensive and orchestrated from the cloud, a public cloud is sufficient, overlooking the critical data residency restriction that prevents storing sensitive data off-premises.
✗Private cloudWrong answer — click to see why▾
Why this is wrong here
A private cloud would keep all resources on-premises, but the question requires using cloud scalability for compute while keeping data on-premises, which is a hybrid cloud scenario.
★ When this WOULD be the correct answer
A company must keep all data and applications within its own data center due to strict regulatory compliance and has no need for public cloud resources. The architecture uses only on-premises infrastructure managed internally.
Why candidates choose this
Candidates may think 'private cloud' means keeping data on-premises, but they overlook the need for cloud scalability for compute, which requires a hybrid approach.
✗Multi-cloudWrong answer — click to see why▾
Why this is wrong here
Multi-cloud refers to using multiple public cloud providers (e.g., AWS and Azure) to avoid vendor lock-in or for redundancy, but it does not address the requirement to keep sensitive data on-premises while using cloud compute. The architecture described requires a hybrid cloud, which combines on-premises infrastructure with a public cloud.
★ When this WOULD be the correct answer
A company wants to use services from two different public cloud providers (e.g., Azure for compute and AWS for storage) to avoid vendor lock-in and leverage best-of-breed services. The question would specify that no on-premises resources are involved, and the goal is to distribute workloads across multiple public clouds.
Why candidates choose this
Candidates may confuse multi-cloud with hybrid cloud, thinking that using both on-premises and cloud is 'multi-cloud,' but multi-cloud strictly involves multiple public clouds, not a mix of on-premises and cloud.
Analysis generated from the official AZ-900blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on AZ-900
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. A company runs a legacy application on-premises that must store data within the country due to regulatory requirements. To handle occasional peak workloads, the company connects its local network to an Azure virtual network via a site-to-site VPN. During these peaks, the application scales out to Azure virtual machines that process compute tasks but never store regulated data outside the on-premises datacenter. Which cloud deployment model does this scenario best describe?
medium- A.Public cloud
- B.Private cloud
- ✓ C.Hybrid cloud
- D.Community cloud
Why C: The scenario combines an on-premises private infrastructure (the legacy application and regulated data) with Azure public cloud resources (virtual machines for compute scaling) connected via a site-to-site VPN. This integration of private and public resources to handle variable workloads while maintaining data sovereignty defines a hybrid cloud deployment model.
Last reviewed: Jun 11, 2026
This AZ-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-900 exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.