AZ-900 Describe cloud concepts Practice Question
A hospital is subject to strict data residency laws that require patient data to remain within the country's borders. They are considering using a public cloud provider. Which cloud deployment model would best meet this compliance requirement?
⚠ Common exam trap
Watch out — candidates often choose hybrid cloud thinking it offers the best of both worlds, but they overlook that the public cloud component could inadvertently store or process data outside the required geographic boundary, violating strict data residency laws.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Private cloud
A private cloud is dedicated to a single organization, allowing the hospital to deploy and manage infrastructure within its own data center or a colocation facility located within the country's borders. This ensures full control over data storage and processing, directly satisfying data residency laws that prohibit patient data from leaving the country. In contrast, public cloud providers may have data centers in multiple regions, making it harder to guarantee data never crosses borders.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Public cloud
Why it's wrong here
Public cloud services run on shared infrastructure owned by a provider and are typically multi-tenant, meaning multiple customers share the same physical hardware. Although providers like Azure offer a wide range of regional data centers that can be selected to keep data in a specific region, the default configurations often replicate data across multiple availability zones or regions for redundancy, which can inadvertently move data outside the required boundary. Additionally, enforcing strict residency in a public cloud requires carefully implementing data residency policies, data classification, and possibly disabling certain services, and even then the provider's operational processes may not guarantee zero data movement beyond the chosen region.
When this WOULD be correct
A company with no specific data residency requirements and a need for scalable, cost-effective infrastructure would choose public cloud to avoid capital expenditure and pay only for resources used.
- ✓
Private cloud
Why this is correct
A private cloud is a cloud computing environment dedicated exclusively to a single organization, either on-premises or hosted by a third-party provider with isolated infrastructure. This gives the hospital direct control over the physical location of servers, storage, and networks, allowing it to ensure all data remains within a specific geographic boundary as required by data residency laws. Moreover, private cloud can be configured with strict access policies, encryption, and audit logs to meet healthcare compliance standards like HIPAA, making it the most reliable choice for strict data residency.
- ✗
Hybrid cloud
Why it's wrong here
A hybrid cloud integrates a private cloud with one or more public cloud services, enabling workload portability and scalability. For strict data residency, this model is risky because even if sensitive data is kept in the private on-premises portion, the hybrid architecture often involves networking connections and data synchronization between the two environments, which could allow data to be replicated or cached in a public cloud region outside the required geographic boundary. Managing and auditing data flow across the hybrid boundary is complex, and a single misconfiguration in a load balancer, backup, or disaster recovery process could result in a residency breach, making it less suitable than a private cloud for a hospital's strict compliance needs.
When this WOULD be correct
A company needs to handle variable workloads while keeping sensitive data on-premises. They can use hybrid cloud to run non-sensitive workloads in the public cloud and keep sensitive data in the private cloud, meeting both scalability and compliance needs.
- ✗
Community cloud
Why it's wrong here
A community cloud is a shared cloud infrastructure built for a specific group of organizations with common compliance or regulatory concerns, such as hospitals or government agencies, and is often managed by one of the members or a third party. While it may seem appropriate for a hospital, the shared nature means that data from multiple tenants resides on the same infrastructure, and the data residency controls are a collective responsibility rather than a single organization's prerogative. This can make it difficult to enforce a strict, tailored data residency boundary for one hospital's data, and if the community spans multiple jurisdictions, the provider may place data in various locations to serve all members, potentially violating the hospital's specific residency requirement.
When this WOULD be correct
A question where multiple organizations with similar compliance requirements (e.g., healthcare providers in the same region) need to share a cloud environment while meeting specific regulatory standards, such as HIPAA, would make community cloud the correct choice.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The AZ-900 exam frequently reuses these exact scenarios with slightly different constraints.
✓Private cloudCorrect answer▾
Why this is correct
A private cloud is a cloud computing environment dedicated exclusively to a single organization, either on-premises or hosted by a third-party provider with isolated infrastructure. This gives the hospital direct control over the physical location of servers, storage, and networks, allowing it to ensure all data remains within a specific geographic boundary as required by data residency laws. Moreover, private cloud can be configured with strict access policies, encryption, and audit logs to meet healthcare compliance standards like HIPAA, making it the most reliable choice for strict data residency.
✗Public cloudWrong answer — click to see why▾
Why this is wrong here
Public cloud providers may store data across multiple geographic regions, making it difficult to guarantee that patient data remains within the country's borders, violating strict data residency laws.
★ When this WOULD be the correct answer
A company with no specific data residency requirements and a need for scalable, cost-effective infrastructure would choose public cloud to avoid capital expenditure and pay only for resources used.
Why candidates choose this
Candidates may assume public cloud is always the default choice due to its popularity and cost benefits, overlooking compliance constraints.
✗Hybrid cloudWrong answer — click to see why▾
Why this is wrong here
Hybrid cloud combines public and private clouds, but if patient data is placed in the public cloud portion, it may violate data residency laws. The question requires data to remain within country borders, and hybrid cloud does not guarantee that all data stays on-premises or in a specific geographic location.
★ When this WOULD be the correct answer
A company needs to handle variable workloads while keeping sensitive data on-premises. They can use hybrid cloud to run non-sensitive workloads in the public cloud and keep sensitive data in the private cloud, meeting both scalability and compliance needs.
Why candidates choose this
Candidates may think hybrid cloud offers the best of both worlds, assuming it can always satisfy compliance by keeping data on-premises, but they overlook that the public cloud component may still process or store data outside the required jurisdiction.
✗Community cloudWrong answer — click to see why▾
Why this is wrong here
Community cloud is shared by several organizations with common concerns, but it does not guarantee data residency within a single country's borders unless specifically configured, and it still involves shared infrastructure that may not meet strict data residency laws.
★ When this WOULD be the correct answer
A question where multiple organizations with similar compliance requirements (e.g., healthcare providers in the same region) need to share a cloud environment while meeting specific regulatory standards, such as HIPAA, would make community cloud the correct choice.
Why candidates choose this
Candidates may think community cloud inherently addresses compliance because it is designed for organizations with shared concerns, but they overlook that data residency requires explicit geographic control, which is not a defining feature of community cloud.
Analysis generated from the official AZ-900blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Quick reference
AWS S3 Storage Class Comparison
| Storage Class | Min Duration | Retrieval | Use Case |
|---|---|---|---|
| S3 Standard | None | Immediate | Frequently accessed data |
| S3 Standard-IA | 30 days | Immediate | Infrequent access, rapid retrieval |
| S3 One Zone-IA | 30 days | Immediate | Non-critical infrequent data |
| S3 Intelligent-Tiering | None | Immediate–hours | Unknown or changing access patterns |
| S3 Glacier Instant | 90 days | Milliseconds | Archive with instant retrieval |
| S3 Glacier Flexible | 90 days | Minutes–hours | Archive, flexible retrieval |
| S3 Glacier Deep Archive | 180 days | Hours | Long-term compliance archive |
Go deeper
Related to this question
Learn chapter
What is Cloud Computing?
Key term
Public cloud
A public cloud is a computing model where third-party providers deliver IT resources like servers, storage, and applications over the internet to multiple customers on a pay-as-you-go basis.
Key term
Private cloud
A private cloud is a cloud computing environment that is used exclusively by a single organization, offering the benefits of cloud services — like scalability and self-service — but with dedicated infrastructure that is not shared with any other company.
About these practice questions
One of 981 original AZ-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-900 exam.