AZ-900 Describe cloud concepts Practice Question
Which cloud model provides the greatest degree of control over the underlying infrastructure?
⚠ Common exam trap
Watch out — candidates often confuse 'control' with 'scalability' or 'cost efficiency,' assuming public cloud offers more control because of its flexibility, but the question specifically targets control over the underlying infrastructure, which is maximized only in a private cloud.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Private cloud
The private cloud model provides the greatest degree of control over the underlying infrastructure because it is dedicated to a single organization, allowing full customization of hardware, virtualization layers, networking, and security configurations. In contrast, public clouds abstract infrastructure management away from the customer, limiting control to the application and data layers only.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Public cloud
Why it's wrong here
In public cloud, computing resources are provisioned over the internet and shared across many customers (multi-tenancy), with the provider owning the physical infrastructure. Because tenants operate on a shared, abstracted platform with common hardware, networking, and virtualization layers, an organization has limited ability to configure the underlying network, hypervisor, or physical security boundaries. This shared responsibility and lack of dedicated infrastructure mean it cannot satisfy a requirement for maximum infrastructure control.
- ✓
Private cloud
Why this is correct
A private cloud is built for exclusive use by one organization, either on-premises or in a dedicated hosted environment. All virtualization, orchestration, storage, and network components are dedicated to that single tenant, allowing the organization to select custom hypervisors, define isolation policies, and manage the full infrastructure stack. This dedicated, single-tenant basis directly provides the maximum infrastructure control specified in the scenario.
- ✗
Hybrid cloud
Why it's wrong here
A hybrid cloud combines a private and public cloud with orchestration and data portability, enabling workload bursts or failover. Even if an on-premises private component is controlled well, the public portion still involves a shared, third-party-managed environment, so the overall hybrid architecture cannot grant maximum control across both environments. The very presence of public-cloud integration weakens the claim to total infrastructure control.
- ✗
Community cloud
Why it's wrong here
A community cloud shares infrastructure among several organizations from the same community (e.g., government agencies or healthcare providers) that have common compliance or security needs, but the resources are still shared and operated by a third party or by a consortia member. Although community clouds provide more targeted governance than public clouds, no single organization has exclusive control of the hardware, network, or hypervisor. Thus it doesn't deliver maximum control for a single organization.
Go deeper
Related to this question
Learn chapter
What is Cloud Computing?
Key term
Private cloud
A private cloud is a cloud computing environment that is used exclusively by a single organization, offering the benefits of cloud services — like scalability and self-service — but with dedicated infrastructure that is not shared with any other company.
Key term
Security
Security in IT is the practice of protecting systems, networks, and data from unauthorized access, damage, or theft.
About these practice questions
One of 981 original AZ-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-900 exam.