AZ-900 Describe cloud concepts Practice Question
A company is evaluating cloud service models. They need to migrate an existing application that requires full control over the operating system and custom software installations. They do not want to manage the underlying physical hardware. Which cloud service model best fits this requirement?
⚠ Common exam trap
Many candidates confuse PaaS with IaaS because both involve cloud hosting, but PaaS removes OS-level access, making it unsuitable for scenarios requiring custom software installations or full OS control.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Infrastructure as a Service (IaaS)
Infrastructure as a Service (IaaS) provides virtualized computing resources over the internet, including virtual machines with full control over the guest operating system. This allows the company to install custom software and manage the OS while the cloud provider handles the underlying physical hardware, such as servers, storage, and networking. The requirement for full OS control and custom software installations excludes PaaS and SaaS, which abstract away the OS layer.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Infrastructure as a Service (IaaS)
Why this is correct
IaaS delivers virtualized compute, storage, and networking resources on demand, with the cloud provider managing only the physical data center and hypervisor layer. The customer retains full administrative control over the guest OS, file systems, and installed applications, which is exactly what is needed when migrating an existing workload without rewriting it. This shared responsibility model makes IaaS the closest to a traditional data center while eliminating hardware procurement and maintenance. For an existing application that requires OS-level customization, IaaS is the appropriate choice.
- ✗
Platform as a Service (PaaS)
Why it's wrong here
PaaS abstracts away the underlying OS and runtime environment, automatically managing patching, scaling, and middleware components such as application servers or database engines. While this reduces operational overhead, the customer loses the ability to configure the operating system or install custom binaries, which may break or require re-platforming an existing application. For a migration of an existing workload that expects tight OS-level control, PaaS is not the right choice because of the provider-managed runtime and platform constraints.
When this WOULD be correct
A company wants to deploy a web application using a built-in runtime (e.g., Node.js, .NET) without managing the OS or patches, focusing only on code and data. PaaS would be correct.
- ✗
Software as a Service (SaaS)
Why it's wrong here
SaaS provides a complete, ready-to-use application accessed over the internet, where the vendor manages every part of the stack, from the OS and network to the application itself. The customer only configures user settings and data, with no capability to alter the underlying execution environment or install custom code. This is unsuitable for migrating an existing application that requires custom runtime or infrastructure control, because SaaS offers only application-level configurability, not infrastructure or OS access.
When this WOULD be correct
A company needs to use a customer relationship management (CRM) application without managing any infrastructure or software updates, and wants to pay a subscription fee for access. In this scenario, SaaS is the correct choice.
- ✗
On-premises deployment
Why it's wrong here
On-premises deployment would require purchasing, cabling, and maintaining physical servers, alongside managing power, cooling, and hardware refreshes—the very capital expenditure and operational burden the company wants to eliminate. Although it offers the highest level of control, it does not provide the scalability or pay-as-you-go flexibility of cloud infrastructure, making it counterproductive for this migration scenario. The goal is to avoid physical hardware management, and on-premises directly contradicts that.
When this WOULD be correct
An exam scenario where the company must maintain full control over all hardware, software, and data due to strict regulatory compliance or security policies, and is willing to manage physical infrastructure.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The AZ-900 exam frequently reuses these exact scenarios with slightly different constraints.
✓Infrastructure as a Service (IaaS)Correct answer▾
Why this is correct
IaaS delivers virtualized compute, storage, and networking resources on demand, with the cloud provider managing only the physical data center and hypervisor layer. The customer retains full administrative control over the guest OS, file systems, and installed applications, which is exactly what is needed when migrating an existing workload without rewriting it. This shared responsibility model makes IaaS the closest to a traditional data center while eliminating hardware procurement and maintenance. For an existing application that requires OS-level customization, IaaS is the appropriate choice.
✗Platform as a Service (PaaS)Wrong answer — click to see why▾
Why this is wrong here
PaaS abstracts the underlying OS and runtime, limiting control over the operating system and custom software installations, which contradicts the requirement for full OS control.
★ When this WOULD be the correct answer
A company wants to deploy a web application using a built-in runtime (e.g., Node.js, .NET) without managing the OS or patches, focusing only on code and data. PaaS would be correct.
Why candidates choose this
Candidates may confuse PaaS with IaaS, thinking PaaS still allows OS-level control, or they underestimate the need for custom software installation flexibility.
✗Software as a Service (SaaS)Wrong answer — click to see why▾
Why this is wrong here
SaaS provides ready-to-use software accessed via the internet, with no control over the underlying OS or ability to install custom software, which contradicts the requirement for full OS control and custom installations.
★ When this WOULD be the correct answer
A company needs to use a customer relationship management (CRM) application without managing any infrastructure or software updates, and wants to pay a subscription fee for access. In this scenario, SaaS is the correct choice.
Why candidates choose this
Candidates may confuse the ease of use and lack of management in SaaS with the flexibility of IaaS, or assume that 'cloud service' always means fully managed services like SaaS.
✗On-premises deploymentWrong answer — click to see why▾
Why this is wrong here
On-premises deployment requires the company to manage the underlying physical hardware, which contradicts the requirement of not wanting to manage physical hardware.
★ When this WOULD be the correct answer
An exam scenario where the company must maintain full control over all hardware, software, and data due to strict regulatory compliance or security policies, and is willing to manage physical infrastructure.
Why candidates choose this
Candidates may think on-premises offers full control over the OS and custom software, overlooking the requirement to avoid managing physical hardware.
Analysis generated from the official AZ-900blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Quick reference
Cloud Service Model Comparison
| Model | You Manage | Provider Manages | Examples |
|---|---|---|---|
| IaaS | OS, runtime, apps, data | Hardware, hypervisor, networking | EC2, Azure VMs, GCP Compute Engine |
| PaaS | Apps and data | OS, runtime, middleware, hardware | Elastic Beanstalk, Azure App Service |
| SaaS | Data and settings only | Everything else | Microsoft 365, Salesforce, Workday |
| FaaS / Serverless | Function code only | Infra, scaling, runtime | Lambda, Azure Functions, Cloud Run |
| CaaS | Containers and apps | Kubernetes, OS, hardware | EKS, AKS, GKE |
Go deeper
Related to this question
Learn chapter
What is Cloud Computing?
Key term
IaaS
IaaS stands for Infrastructure as a Service, which means renting virtual computing resources like servers, storage, and networking from a cloud provider instead of buying and managing physical hardware yourself.
Key term
PaaS
Platform as a Service (PaaS) is a cloud computing model that provides a managed platform for developers to build, run, and manage applications without dealing with the underlying infrastructure.
About these practice questions
One of 981 original AZ-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-900 exam.