Hybrid Cloud for Data Sovereignty and Cloud Analytics
A hospital must store patient medical records on-premises to comply with strict data sovereignty regulations. However, they also want to use advanced analytics tools hosted on a public cloud platform. Which cloud deployment model best meets their needs?
Quick Answer
Hybrid cloud is the deployment model that satisfies both constraints at once — data sovereignty regulations requiring medical records to stay on-premises, and the desire to use public cloud analytics tools that only exist in that environment. Rather than forcing a single choice between keeping everything local or moving everything to the cloud, hybrid deployment lets the hospital retain patient records on infrastructure it directly controls while connecting to public cloud services for workloads that do not carry the same regulatory constraint, such as running analytics against de-identified or aggregated data. This is a common healthcare and public-sector pattern on the exam: whenever a scenario names a specific regulatory reason data must remain on-premises while also wanting to benefit from cloud capability elsewhere, hybrid cloud is almost always the intended answer, since it is the only deployment model that explicitly accommodates both requirements simultaneously rather than trading one off against the other.
⚠ Common exam trap
Test-takers frequently choose Private cloud (Option A) thinking it is the only way to ensure data sovereignty, but they overlook the requirement for advanced analytics tools hosted on a public cloud, which Hybrid cloud uniquely satisfies.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Hybrid cloud
(Hybrid cloud) is correct because it allows the hospital to keep sensitive patient medical records on-premises to satisfy strict data sovereignty regulations, while leveraging public cloud services for advanced analytics. This model combines private and public cloud resources, enabling data to remain compliant without sacrificing access to cloud-hosted analytics tools.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Private cloud
Why it's wrong here
A private cloud provides dedicated resources for a single organization, often on-premises, but does not integrate with public cloud services for analytics.
- ✗
Public cloud
Why it's wrong here
Using only a public cloud would require storing patient records off-premises, violating data sovereignty regulations.
- ✓
Hybrid cloud
Why this is correct
Hybrid cloud combines on-premises and public cloud resources, enabling the hospital to keep sensitive data on-site while using public cloud analytics.
- ✗
Community cloud
Why it's wrong here
Community cloud is shared among several organizations with common concerns (e.g., healthcare providers), but it does not inherently provide a split between on-premises and public cloud for data sovereignty.
Go deeper
Related to this question
About these practice questions
This MS-900 question is part of Courseiva's 217-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on MS-900
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. A healthcare organization must keep sensitive patient data on-premises due to regulatory compliance, but wants to use cloud services for other applications like customer relationship management and collaboration. Which cloud deployment model best meets this requirement?
medium- A.Public cloud
- B.Private cloud
- ✓ C.Hybrid cloud
- D.Community cloud
Why C: The hybrid cloud model is correct because it allows the healthcare organization to keep sensitive patient data on-premises (private cloud) for regulatory compliance (e.g., HIPAA), while leveraging public cloud services for customer relationship management and collaboration tools like Microsoft Dynamics 365 and Microsoft 365. This deployment model provides a unified environment where workloads can be distributed across on-premises and cloud infrastructure, ensuring data sovereignty and compliance without sacrificing scalability or cost efficiency.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MS-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-900 exam.