Courseiva
Describe cloud conceptseasyMultiple ChoiceObjective-mapped

AZ-900 Describe cloud concepts Practice Question

What is the primary difference between a public cloud and a private cloud?

⚠ Common exam trap

Test-takers frequently confuse 'security' as the primary difference, but Azure's shared responsibility model means both public and private clouds require proper security configuration, and the real distinction is multi-tenancy versus single-tenancy.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Public cloud infrastructure is shared among multiple customers; private is dedicated to one organization

The primary difference is that a public cloud uses a multi-tenant architecture where infrastructure resources like compute, storage, and networking are shared across multiple unrelated customers, while a private cloud provisions dedicated infrastructure for a single organization, either on-premises or hosted by a third party. This distinction is fundamental to cloud deployment models as defined by NIST SP 800-145, which emphasizes resource pooling in public clouds versus single-tenant isolation in private clouds.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Public cloud is more secure than private cloud

    Why it's wrong here

    There is no inherent security advantage to a public cloud over a private cloud; security outcomes depend on the shared responsibility model and configuration. A private cloud can offer stronger physical and logical isolation for regulated workloads, while a well-architected public cloud can provide encryption, DDoS protection, and compliance certifications at scale. If resources are misconfigured, either model can be compromised. Hence, 'public cloud is more secure' is a false generalization.

  • Public cloud infrastructure is shared among multiple customers; private is dedicated to one organization

    Why this is correct

    The key distinction is tenancy. In a public cloud, a provider such as Azure pools infrastructure and delivers services to many customers, or tenants, with logical isolation (multi-tenancy). In a private cloud, all infrastructure is dedicated exclusively to one organization, which can be on-premises or hosted by a third party, but it is not shared with other tenants. This fundamental ownership and sharing difference is the correct definition for this question.

  • Private cloud is always hosted by a third-party provider

    Why it's wrong here

    Choosing a private cloud does not require a third-party provider. The hosting can be on-premises in an organization's own data center, in a colocation facility, or managed by a vendor, but the defining trait is that the compute, storage, and network resources are dedicated to one organization. For example, Azure Stack enables private cloud delivery from a customer-controlled data center. Therefore, the statement is incorrect because provider ownership is not what makes a cloud private.

  • Public cloud can only be accessed from within the organization's network

    Why it's wrong here

    Public cloud services are exposed through internet-accessible endpoints and are routinely consumed from anywhere in the world after authentication and authorization. Being 'public' means the service provider owns the infrastructure and offers it over the internet, not that access is restricted to a corporate network. If an organization wants remote access to on-premises resources, it usually needs a VPN, ExpressRoute, or gateway; in contrast, public cloud access relies on network security rules, TLS, and identity controls. Thus, the claim that public cloud is limited to internal network access is false.

Go deeper

Related to this question

About these practice questions

One of 981 original AZ-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This AZ-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-900 exam.