Courseiva
Describe cloud conceptseasyMultiple ChoiceObjective-mapped

AZ-900 Describe cloud concepts Practice Question

A company is evaluating cloud providers and needs to ensure that their data remains within a specific geographic boundary due to data sovereignty laws. Which cloud concept is most directly related to this requirement?

⚠ Common exam trap

Many candidates confuse 'Compliance' (a broad category of standards) with the specific technical mechanism (Region) that enforces data residency, leading them to select D instead of A.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Region

Azure regions are discrete geographic locations containing one or more datacenters that provide the physical boundary for data residency. By deploying resources within a specific region (e.g., 'West Europe'), an organization ensures that data is stored and processed within that geographic boundary, directly addressing data sovereignty laws. Other concepts like Availability Zones or Latency do not enforce geographic data residency.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Region

    Why this is correct

    An Azure region is a set of datacenters deployed within a latency-defined perimeter and connected through a dedicated regional low-latency network. Choosing a region is the primary, concrete control for meeting data residency requirements, because it determines the geographic boundary in which your data is stored at rest. Azure guarantees that data stays within the selected region, aside from geo-redundant backups that can be constrained via paired regions or policies. Therefore, when a customer must ensure data sovereignty, selecting the correct region is the direct answer.

  • Availability Zone

    Why it's wrong here

    An Availability Zone (AZ) is a physically separate datacenter within an Azure region, with its own power, cooling, and networking, designed to provide high availability and fault tolerance. All AZs in a region are located within the same geographic area and thus share the same data-residency boundary. While redundant AZs protect against datacenter-level failures, they do not offer a way to place data across different countries or jurisdictions. Therefore, availability zones are a resilience feature, not a data sovereignty or residency control.

    When this WOULD be correct

    A question asking: 'Which feature ensures an application remains available during a data center failure in the same region?' would make Availability Zones the correct answer, as they provide redundancy across separate facilities within a region.

  • Latency

    Why it's wrong here

    Latency measures round-trip time for data to travel between a client and a cloud service, typically expressed in milliseconds. While it influences the user-experienced performance and can be reduced by choosing a nearby region, it is not a tool for controlling where data physically resides. A customer can have low latency to a region while their data is still stored elsewhere if that region is not explicitly chosen for residency. Thus, latency is a performance consideration, not a data-residency or sovereignty mechanism.

    When this WOULD be correct

    A question asking which cloud concept is most important for a real-time application like online gaming or video conferencing, where low delay is critical, would have latency as the correct answer.

  • Compliance

    Why it's wrong here

    Compliance refers to adherence to legal, regulatory, and industry standards—such as GDPR, HIPAA, or FedRAMP—and is a broad programmatic goal rather than a specific architectural construct. Azure provides compliance offerings and certifications that help customers satisfy obligations, but these certifications do not by themselves determine the geographic location of data. Data residency is satisfied by selecting a region whose physical location is inside the required jurisdiction; compliance is the paperwork and controls that validate that choice. Therefore, compliance is necessary but not sufficient—it is not the concrete placement action.

    When this WOULD be correct

    A question like: 'A company needs to ensure its cloud usage meets industry-specific regulatory standards such as HIPAA or GDPR. Which cloud concept is most directly related to this requirement?' would make Compliance the correct answer.

Option-by-option analysis

Why each answer is right or wrong

Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The AZ-900 exam frequently reuses these exact scenarios with slightly different constraints.

RegionCorrect answer

Why this is correct

An Azure region is a set of datacenters deployed within a latency-defined perimeter and connected through a dedicated regional low-latency network. Choosing a region is the primary, concrete control for meeting data residency requirements, because it determines the geographic boundary in which your data is stored at rest. Azure guarantees that data stays within the selected region, aside from geo-redundant backups that can be constrained via paired regions or policies. Therefore, when a customer must ensure data sovereignty, selecting the correct region is the direct answer.

Availability ZoneWrong answer — click to see why

Why this is wrong here

Availability Zones are physically separate data centers within a region, designed for high availability and fault tolerance, not for enforcing data residency boundaries. Data sovereignty laws require data to stay within a specific geographic area, which is defined by regions, not zones.

★ When this WOULD be the correct answer

A question asking: 'Which feature ensures an application remains available during a data center failure in the same region?' would make Availability Zones the correct answer, as they provide redundancy across separate facilities within a region.

Why candidates choose this

Candidates may confuse Availability Zones with geographic boundaries because zones are physically distinct locations, but they are all within one region and do not guarantee data stays in a specific country or jurisdiction.

LatencyWrong answer — click to see why

Why this is wrong here

Latency refers to the delay in data transmission, not to geographic data residency. Data sovereignty laws require data to stay within a specific region, which is addressed by choosing a cloud region, not by minimizing latency.

★ When this WOULD be the correct answer

A question asking which cloud concept is most important for a real-time application like online gaming or video conferencing, where low delay is critical, would have latency as the correct answer.

Why candidates choose this

Candidates may confuse geographic proximity (which affects latency) with data residency, assuming that keeping data close reduces latency and thus satisfies sovereignty, but sovereignty is about legal boundaries, not performance.

ComplianceWrong answer — click to see why

Why this is wrong here

Compliance is a broader concept that includes adhering to laws and regulations, but the question specifically asks about ensuring data remains within a geographic boundary. Regions directly address geographic boundaries, while compliance is about meeting requirements, not the mechanism to enforce geographic data residency.

★ When this WOULD be the correct answer

A question like: 'A company needs to ensure its cloud usage meets industry-specific regulatory standards such as HIPAA or GDPR. Which cloud concept is most directly related to this requirement?' would make Compliance the correct answer.

Why candidates choose this

Candidates may confuse the requirement to adhere to data sovereignty laws with the broader concept of compliance, mistakenly thinking that 'compliance' directly addresses geographic data residency rather than the specific regional infrastructure that enforces it.

Analysis generated from the official AZ-900blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”

About these practice questions

This AZ-900 question is part of Courseiva's 981-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This AZ-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-900 exam.