AZ-900 Describe cloud concepts Practice Question
A company is evaluating cloud deployment models. They need to keep sensitive data on-premises due to regulations but want to use Azure for development and testing workloads. Which cloud deployment model is most suitable?
⚠ Common exam trap
A common mix-up: candidates choose Public cloud thinking Azure can handle all workloads, overlooking the regulatory requirement to keep sensitive data on-premises, or choose Private cloud assuming it's the only compliant option, missing the hybrid model's ability to segregate workloads.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Hybrid cloud
A hybrid cloud deployment model is most suitable because it combines on-premises infrastructure (private cloud) with public cloud services like Azure. This allows the company to keep sensitive data on-premises to meet regulatory compliance while leveraging Azure for development and testing workloads, which do not have the same data residency constraints.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Hybrid cloud
Why this is correct
A hybrid cloud deployment combines your organization’s on-premises or private infrastructure with Azure public cloud services, connected via VPN or ExpressRoute. This model is correct because it lets you keep sensitive data resident on-premises for compliance while still using Azure’s scalable compute, storage, and AI services for non-sensitive workloads. The scenario explicitly requires both an on-premises component and Azure, which is the definition of hybrid cloud.
- ✗
Public cloud
Why it's wrong here
A public cloud, such as Azure’s own regions, is entirely provisioned on third-party hardware off-premises, with no dedicated physical server available to the customer. While it provides broad scalability and is often the cheapest option, it violates the stated requirement that sensitive data must remain on-premises, because all data would reside on cloud provider hardware. Even with encryption controls, the physical location and control are not on-premises, which disqualifies public cloud as the sole deployment model for this scenario.
When this WOULD be correct
A company with no regulatory constraints that wants to minimize capital expenditure and scale quickly for development and testing would choose public cloud, as it offers pay-as-you-go resources without on-premises infrastructure.
- ✗
Private cloud
Why it's wrong here
A private cloud is a cloud environment dedicated solely to one organization, either on-premises or in a third-party data center, and it does not inherently connect to Azure public cloud services. While it can offer strong control and security, it fails the scenario because the requirement is to use Azure alongside on-premises infrastructure, not to replace those resources with a single-tenant private cloud. Private cloud alone cannot provide the hybrid mix of on-premises and public cloud that the scenario demands.
When this WOULD be correct
A company must keep all data and applications on-premises due to strict regulatory compliance and does not require any public cloud resources. They need a dedicated, isolated environment with full control.
- ✗
Community cloud
Why it's wrong here
A community cloud is a multi-tenant cloud infrastructure shared among several organizations that have common compliance, security, or policy concerns, such as government agencies or healthcare providers. It does not involve any integration with an organization's own on-premises systems or with Azure public cloud, so it cannot satisfy the requirement to keep sensitive data on-premises while using Azure for other workloads. The scenario is about a hybrid relationship between two distinct environments, not a shared community infrastructure.
When this WOULD be correct
A question where multiple organizations with shared regulatory or security requirements (e.g., healthcare providers, government agencies) need a cloud environment that is neither fully public nor private, but exclusive to their community. For example: 'A consortium of hospitals needs a cloud environment to share patient data for research while complying with HIPAA. Which model?'
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The AZ-900 exam frequently reuses these exact scenarios with slightly different constraints.
✓Hybrid cloudCorrect answer▾
Why this is correct
A hybrid cloud deployment combines your organization’s on-premises or private infrastructure with Azure public cloud services, connected via VPN or ExpressRoute. This model is correct because it lets you keep sensitive data resident on-premises for compliance while still using Azure’s scalable compute, storage, and AI services for non-sensitive workloads. The scenario explicitly requires both an on-premises component and Azure, which is the definition of hybrid cloud.
✗Public cloudWrong answer — click to see why▾
Why this is wrong here
Public cloud would not allow the company to keep sensitive data on-premises; all workloads run in the cloud provider's data centers, violating regulatory requirements.
★ When this WOULD be the correct answer
A company with no regulatory constraints that wants to minimize capital expenditure and scale quickly for development and testing would choose public cloud, as it offers pay-as-you-go resources without on-premises infrastructure.
Why candidates choose this
Candidates may think public cloud is sufficient because Azure can be used for dev/test, but they overlook the requirement to keep sensitive data on-premises, which public cloud alone cannot satisfy.
✗Private cloudWrong answer — click to see why▾
Why this is wrong here
A private cloud is used exclusively by a single organization, but the question requires a mix of on-premises (private) and Azure (public) resources, which is hybrid cloud.
★ When this WOULD be the correct answer
A company must keep all data and applications on-premises due to strict regulatory compliance and does not require any public cloud resources. They need a dedicated, isolated environment with full control.
Why candidates choose this
Candidates may think 'sensitive data' implies private cloud, overlooking the need for both on-premises and public cloud resources.
✗Community cloudWrong answer — click to see why▾
Why this is wrong here
A community cloud is shared by several organizations with common concerns, not a mix of on-premises and public cloud. The question requires keeping data on-premises while using Azure for dev/test, which is hybrid cloud, not community cloud.
★ When this WOULD be the correct answer
A question where multiple organizations with shared regulatory or security requirements (e.g., healthcare providers, government agencies) need a cloud environment that is neither fully public nor private, but exclusive to their community. For example: 'A consortium of hospitals needs a cloud environment to share patient data for research while complying with HIPAA. Which model?'
Why candidates choose this
Candidates may confuse 'community' with 'hybrid' because both involve multiple environments, or they think 'community' implies a mix of on-premises and cloud, but community cloud is about shared ownership among organizations, not location blending.
Analysis generated from the official AZ-900blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Go deeper
Related to this question
Learn chapter
What is Cloud Computing?
Key term
Private cloud
A private cloud is a cloud computing environment that is used exclusively by a single organization, offering the benefits of cloud services — like scalability and self-service — but with dedicated infrastructure that is not shared with any other company.
Key term
Public cloud
A public cloud is a computing model where third-party providers deliver IT resources like servers, storage, and applications over the internet to multiple customers on a pay-as-you-go basis.
About these practice questions
This AZ-900 question is part of Courseiva's 981-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-900 exam.