AZ-900 Describe cloud concepts Practice Question
Which cloud benefit specifically refers to Microsoft's commitment to securing customer data and keeping it private?
⚠ Common exam trap
Watch out — candidates often confuse 'security' (which includes technical controls like firewalls and encryption) with 'security and privacy governance' (which is the overarching commitment and legal framework for data handling), leading them to pick a generic security-related option if one existed, or to misinterpret scalability or global reach as indirectly protecting data.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Security and privacy governance
Microsoft's commitment to securing customer data and keeping it private is encapsulated in the 'Security and privacy governance' benefit. This refers to Microsoft's shared responsibility model and contractual guarantees under the Microsoft Online Services Terms (OST) and the Microsoft Privacy Statement, which ensure that customer data is not used for advertising or mined for AI training without explicit consent. It also includes compliance with global standards like ISO 27001, SOC 2, and GDPR, making it the direct answer to the question.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Scalability
Why it's wrong here
Scalability in Azure is the ability to dynamically adjust compute, storage, and network resources to match fluctuating demand, for example through virtual machine scale sets or Azure App Service autoscaling. This operational attribute directly addresses capacity elasticity, not data protection or privacy obligations. Azure's security and privacy governance, in contrast, includes compliance certifications, data encryption, and the Microsoft Privacy Statement, which are the actual subject of the question.
- ✓
Security and privacy governance
Why this is correct
Security and privacy governance is the correct answer because Azure provides a comprehensive governance framework covering data privacy commitments, compliance with regulations like GDPR, and transparent data handling policies. This includes tools such as Azure Policy, Azure Blueprints, and the Service Trust Portal, which give customers visibility into security and compliance controls. Azure’s explicit certifications (ISO 27001, SOC 1/2/3, GDPR) and clear statements about data residency and access demonstrate a governance-centric approach to protecting customer data, which is what the question's scenario is asking about.
- ✗
Predictable pricing
Why it's wrong here
Predictable pricing is a financial and cost-management benefit that lets customers estimate and manage cloud spending using tools like the Azure Pricing Calculator, reserved instances, and Azure Hybrid Benefit. It directly concerns budgeting and price stability, not security or privacy assurances. Security and privacy governance, by contrast, deals with safeguarding data and meeting regulatory standards, which is a separate category of Azure benefits. Therefore, predictable pricing does not align with the concept described in the question.
- ✗
Global reach
Why it's wrong here
Global reach refers to Azure's presence via many datacenters and regions worldwide, enabling low-latency access, geo-redundancy, and data sovereignty options. While global scale is a geographic or architectural advantage, it does not inherently describe the legal and procedural commitments to data privacy and security. The question targets governance—how data is protected and used in compliance with regulations—which is distinct from where datacenters are physically located. Thus, global reach is an incorrect choice.
Go deeper
Related to this question
Learn chapter
What is Cloud Computing?
Key term
Shared responsibility model
The shared responsibility model is a framework that defines which security and compliance tasks are handled by the cloud provider and which are handled by the customer.
Key term
Security
Security in IT is the practice of protecting systems, networks, and data from unauthorized access, damage, or theft.
About these practice questions
This AZ-900 question is part of Courseiva's 981-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-900 exam.