AZ-900 Describe cloud concepts Practice Question
A company wants to ensure that their cloud provider's physical data centers are located in specific geographic areas to comply with data residency requirements. Which cloud concept is this related to?
⚠ Common exam trap
Candidates often confuse data sovereignty with availability or disaster recovery, mistakenly thinking that geographic placement is about uptime or backup rather than legal jurisdiction and data residency compliance.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Data sovereignty
Data sovereignty is the concept that data is subject to the laws and regulations of the country or region where it is physically stored. By ensuring their cloud provider's data centers are located in specific geographic areas, the company is directly addressing data sovereignty requirements to comply with local data residency laws, such as GDPR in Europe or the Personal Information Protection and Electronic Documents Act (PIPEDA) in Canada.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Data sovereignty
Why this is correct
Data sovereignty is the principle that data is subject to the laws and legal jurisdictions of the country or region where it physically resides. Choosing a specific Azure region for your deployment ensures that data remains within defined geographic boundaries, directly addressing compliance requirements like GDPR, the Data Protection Act, or industry-specific residency mandates. Consequently, it is the correct answer because it explicitly deals with where cloud providers store their physical data centers relative to legal jurisdiction.
- ✗
Availability
Why it's wrong here
Availability, in cloud computing, refers to a system's ability to remain operational and accessible for a high percentage of time, typically measured as a Service Level Agreement (SLA) percentage. It concerns uptime, fault tolerance, and redundancy—for example, using Availability Zones to protect against single-site failures—but it does not dictate the physical location or legal jurisdiction of the underlying datacenters. Therefore, availability is not the correct answer for a question about aligning datacenter location with legal or regulatory mandates.
When this WOULD be correct
A question asking about the ability of a cloud service to remain operational and accessible despite failures, such as 'Which cloud concept ensures that resources are accessible when needed?' would have Availability as the correct answer.
- ✗
Disaster recovery
Why it's wrong here
Disaster recovery (DR) is a strategy for replicating data and workloads to a separate secondary site so that operations can resume quickly after an outage or natural disaster. While DR involves the physical location of a secondary datacenter, its purpose is resilience and business continuity, not ensuring that data remains within a specific legal boundary. DR mechanisms like Azure Site Recovery and geo-redundant storage are unrelated to the initial placement decisions made to satisfy data sovereignty laws, so this option is incorrect.
When this WOULD be correct
A company wants to ensure business continuity after a natural disaster by replicating data and applications to a secondary region. Which cloud concept is this related to?
- ✗
Hybrid cloud
Why it's wrong here
Hybrid cloud describes an architecture that combines an organization's on-premises infrastructure with public cloud services, typically connected via a VPN or Azure Arc to unify management and enable workload portability. This model can span multiple regions and datacenters, but hybrid cloud is not fundamentally about satisfying legal requirements based on geographic location. It addresses flexibility and integration, not whether the cloud provider's physical datacenters reside in a particular jurisdiction for sovereignty, making it incorrect here.
When this WOULD be correct
A company wants to use a mix of on-premises and cloud resources to keep sensitive data on-premises while leveraging public cloud for less critical workloads. The question would ask which cloud deployment model supports this scenario.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The AZ-900 exam frequently reuses these exact scenarios with slightly different constraints.
✓Data sovereigntyCorrect answer▾
Why this is correct
Data sovereignty is the principle that data is subject to the laws and legal jurisdictions of the country or region where it physically resides. Choosing a specific Azure region for your deployment ensures that data remains within defined geographic boundaries, directly addressing compliance requirements like GDPR, the Data Protection Act, or industry-specific residency mandates. Consequently, it is the correct answer because it explicitly deals with where cloud providers store their physical data centers relative to legal jurisdiction.
✗AvailabilityWrong answer — click to see why▾
Why this is wrong here
Availability refers to the uptime and accessibility of cloud services, not the geographic location of data centers for data residency compliance.
★ When this WOULD be the correct answer
A question asking about the ability of a cloud service to remain operational and accessible despite failures, such as 'Which cloud concept ensures that resources are accessible when needed?' would have Availability as the correct answer.
Why candidates choose this
Candidates may confuse data residency (where data is stored) with service availability (whether the service is up), especially if they think 'availability' includes geographic redundancy for compliance.
✗Disaster recoveryWrong answer — click to see why▾
Why this is wrong here
Disaster recovery focuses on restoring IT systems and data after a disruptive event, not on the geographic location of data centers for data residency compliance.
★ When this WOULD be the correct answer
A company wants to ensure business continuity after a natural disaster by replicating data and applications to a secondary region. Which cloud concept is this related to?
Why candidates choose this
Candidates may confuse data residency with disaster recovery because both involve geographic locations, but disaster recovery is about resilience, not compliance.
✗Hybrid cloudWrong answer — click to see why▾
Why this is wrong here
Hybrid cloud refers to a combination of public and private cloud environments, not to the geographic location of physical data centers for data residency compliance.
★ When this WOULD be the correct answer
A company wants to use a mix of on-premises and cloud resources to keep sensitive data on-premises while leveraging public cloud for less critical workloads. The question would ask which cloud deployment model supports this scenario.
Why candidates choose this
Candidates may confuse hybrid cloud with multi-region or geographically distributed deployments, thinking it addresses data residency by mixing local and global resources.
Analysis generated from the official AZ-900blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Go deeper
Related to this question
Learn chapter
What is Cloud Computing?
Key term
Data residency
Data residency is the physical or geographical location where an organization's data is stored and processed, often subject to local laws.
Key term
Region
A region is a distinct geographic location where a cloud provider operates multiple data centers that are connected by low-latency networks and provide cloud services.
About these practice questions
Courseiva writes every AZ-900 question from scratch — 981 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-900 exam.