AZ-900 Describe cloud concepts Practice Question
A company is subject to strict data residency regulations that require all personally identifiable information (PII) to remain on their own physical servers. However, they want to use Azure for compute-intensive analytics that do not process PII. They also need a consistent set of management tools to manage resources across both environments. Which cloud deployment model should the company adopt?
⚠ Common exam trap
Many exam-takers confuse 'private cloud' as the only option for data residency, overlooking that hybrid cloud allows sensitive data to stay on-premises while leveraging public cloud services for non-sensitive workloads, which is exactly what the scenario describes.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Hybrid cloud
The hybrid cloud model is correct because it allows the company to keep PII on-premises (private cloud) to satisfy data residency regulations while running compute-intensive analytics in Azure (public cloud). Azure Arc provides a consistent set of management tools to govern resources across both environments, enabling unified policy, compliance, and monitoring.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Public cloud
Why it's wrong here
Incorrect. A public cloud deployment means all resources are hosted by a third-party provider like Microsoft and shared over the internet. This would not allow the company to retain PII on their own physical servers.
When this WOULD be correct
A company with no data residency requirements that wants to use Azure for all workloads, including analytics, and does not need to maintain on-premises servers for any data, would choose the public cloud model.
- ✗
Private cloud
Why it's wrong here
Incorrect. A private cloud is dedicated to a single organization and is typically hosted on-premises or by a third party exclusively for that organization. While it addresses data residency, it does not provide access to Azure's public cloud services for the analytics workload.
When this WOULD be correct
A company must keep all data and applications on-premises due to strict regulatory requirements and has no need for public cloud resources. They require full control over their infrastructure and are willing to manage it entirely in-house.
- ✓
Hybrid cloud
Why this is correct
Hybrid cloud is correct because it combines a private cloud or on-premises data center with the public Azure cloud, linked by secure connectivity (e.g., VPN, ExpressRoute). This architecture lets the company store PII on its own physical servers to meet data residency rules, while running computation-heavy analytics in Azure, scaling beyond local capacity. Tools like Azure Arc provide unified management and governance across both environments, ensuring compliance and operational consistency.
- ✗
Community cloud
Why it's wrong here
Incorrect. A community cloud is shared among several organizations with common interests or regulatory requirements. It does not inherently support a mix of on-premises and public cloud resources, and it is not a standard model covered in Azure fundamentals.
When this WOULD be correct
A company in the healthcare sector needs to share a cloud environment with other healthcare providers to meet industry-specific regulatory requirements (e.g., HIPAA) while benefiting from shared costs and resources. The cloud is used by a specific community with similar compliance needs.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The AZ-900 exam frequently reuses these exact scenarios with slightly different constraints.
✓Hybrid cloudCorrect answer▾
Why this is correct
Hybrid cloud is correct because it combines a private cloud or on-premises data center with the public Azure cloud, linked by secure connectivity (e.g., VPN, ExpressRoute). This architecture lets the company store PII on its own physical servers to meet data residency rules, while running computation-heavy analytics in Azure, scaling beyond local capacity. Tools like Azure Arc provide unified management and governance across both environments, ensuring compliance and operational consistency.
✗Public cloudWrong answer — click to see why▾
Why this is wrong here
A public cloud would not allow the company to keep PII on their own physical servers, as public cloud resources are hosted by a third-party provider off-premises.
★ When this WOULD be the correct answer
A company with no data residency requirements that wants to use Azure for all workloads, including analytics, and does not need to maintain on-premises servers for any data, would choose the public cloud model.
Why candidates choose this
Candidates may think public cloud is always the best choice for analytics due to its scalability and cost-effectiveness, overlooking the strict data residency requirement for PII.
✗Private cloudWrong answer — click to see why▾
Why this is wrong here
A private cloud would require the company to keep all resources, including compute-intensive analytics, on their own physical servers, which contradicts their goal of using Azure for analytics. They need a hybrid model to keep PII on-premises while leveraging Azure for other workloads.
★ When this WOULD be the correct answer
A company must keep all data and applications on-premises due to strict regulatory requirements and has no need for public cloud resources. They require full control over their infrastructure and are willing to manage it entirely in-house.
Why candidates choose this
Candidates may think that because the company needs to keep PII on their own servers, a private cloud is the only option, overlooking the possibility of using public cloud for non-sensitive workloads.
✗Community cloudWrong answer — click to see why▾
Why this is wrong here
A community cloud is shared by several organizations with common concerns (e.g., compliance, security). This question requires a mix of on-premises (for PII) and public cloud (for analytics) with unified management, which is hybrid cloud, not community cloud.
★ When this WOULD be the correct answer
A company in the healthcare sector needs to share a cloud environment with other healthcare providers to meet industry-specific regulatory requirements (e.g., HIPAA) while benefiting from shared costs and resources. The cloud is used by a specific community with similar compliance needs.
Why candidates choose this
Candidates may confuse 'community' with 'hybrid' because both involve multiple environments, or they may think that strict data residency regulations require a shared community cloud rather than a hybrid model.
Analysis generated from the official AZ-900blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Go deeper
Related to this question
Learn chapter
What is Cloud Computing?
Key term
Azure Arc
Azure Arc is a Microsoft service that lets you manage servers, Kubernetes clusters, and databases running outside of Azure as if they were native Azure resources.
Key term
Public cloud
A public cloud is a computing model where third-party providers deliver IT resources like servers, storage, and applications over the internet to multiple customers on a pay-as-you-go basis.
About these practice questions
This AZ-900 question is part of Courseiva's 981-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-900 exam.