Hybrid Cloud for Data Sovereignty and Cloud Analytics
A hospital must store patient medical records on-premises to comply with strict data sovereignty regulations. However, they also want to use advanced analytics tools hosted on a public cloud platform. Which cloud deployment model best meets their needs?
Quick Answer
Hybrid cloud is the deployment model that satisfies both constraints at once — data sovereignty regulations requiring medical records to stay on-premises, and the desire to use public cloud analytics tools that only exist in that environment. Rather than forcing a single choice between keeping everything local or moving everything to the cloud, hybrid deployment lets the hospital retain patient records on infrastructure it directly controls while connecting to public cloud services for workloads that do not carry the same regulatory constraint, such as running analytics against de-identified or aggregated data. This is a common healthcare and public-sector pattern on the exam: whenever a scenario names a specific regulatory reason data must remain on-premises while also wanting to benefit from cloud capability elsewhere, hybrid cloud is almost always the intended answer, since it is the only deployment model that explicitly accommodates both requirements simultaneously rather than trading one off against the other.
⚠ Common exam trap
Test-takers frequently choose Private cloud (Option A) thinking it is the only way to ensure data sovereignty, but they overlook the requirement for advanced analytics tools hosted on a public cloud, which Hybrid cloud uniquely satisfies.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Hybrid cloud
(Hybrid cloud) is correct because it allows the hospital to keep sensitive patient medical records on-premises to satisfy strict data sovereignty regulations, while leveraging public cloud services for advanced analytics. This model combines private and public cloud resources, enabling data to remain compliant without sacrificing access to cloud-hosted analytics tools.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Private cloud
Why it's wrong here
A private cloud keeps records on-premises but does not by itself deliver the public cloud analytics tools the hospital also requires; it addresses only the sovereignty half of the requirement. It is tempting because strict data residency and full control over patient records are exactly what private cloud provides when no external cloud services are needed.
- ✗
Public cloud
Why it's wrong here
Public cloud moves the medical records off-premises, breaching the data sovereignty regulation that mandates on-premises storage. It is tempting because the analytics tools are hosted there, and public cloud alone is the right answer when no residency constraint applies and all workloads can be outsourced to a provider.
- ✓
Hybrid cloud
Why this is correct
Hybrid cloud keeps regulated patient records on the hospital's on-premises infrastructure, satisfying the data sovereignty constraint, while securely connecting to public cloud analytics services over a private link or VPN. This split lets sensitive data remain local and computation-intensive analytics scale in the public cloud, which neither pure private nor public deployment achieves.
- ✗
Community cloud
Why it's wrong here
A community cloud is shared by several organisations with common concerns, so the records would still reside outside the hospital's on-premises environment, failing the sovereignty rule. It is tempting because community cloud suits regulated sectors such as healthcare where multiple hospitals share compliant infrastructure, but not when data must stay on-site.
Go deeper
Related to this question
About these practice questions
This MS-900 question is part of Courseiva's 794-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on MS-900
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. A healthcare organization must keep sensitive patient data on-premises due to regulatory compliance, but wants to use cloud services for other applications like customer relationship management and collaboration. Which cloud deployment model best meets this requirement?
medium- A.Public cloud
- B.Private cloud
- ✓ C.Hybrid cloud
- D.Community cloud
Why C: The hybrid cloud model is correct because it allows the healthcare organization to keep sensitive patient data on-premises (private cloud) for regulatory compliance (e.g., HIPAA), while leveraging public cloud services for customer relationship management and collaboration tools like Microsoft Dynamics 365 and Microsoft 365. This deployment model provides a unified environment where workloads can be distributed across on-premises and cloud infrastructure, ensuring data sovereignty and compliance without sacrificing scalability or cost efficiency.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MS-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-900 exam.