NIST Essential Characteristics of Cloud Computing
Which three of the following are characteristics of cloud computing as defined by the National Institute of Standards and Technology (NIST)? (Choose three.)
⚠ Common exam trap
Microsoft often tests the exact NIST definition by including plausible-sounding but non-NIST characteristics like 'dedicated hardware per tenant' or 'fixed pricing models,' which candidates mistakenly associate with cloud computing because they are common in traditional on-premises or managed hosting environments.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
On-demand self-service
NIST SP 800-145 defines cloud computing by five essential characteristics. On-demand self-service allows a consumer to provision computing capabilities automatically without requiring human interaction with each service provider. Broad network access means capabilities are available over the network and accessed through standard mechanisms (e.g., mobile phones, tablets, laptops, and workstations). Resource pooling enables the provider's computing resources to serve multiple consumers using a multi-tenant model, with different physical and virtual resources dynamically assigned and reassigned according to consumer demand.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
On-demand self-service
Why this is correct
On-demand self-service means a consumer can unilaterally provision computing capabilities, such as server time and network storage, without requiring human interaction with each service provider. This capability is typically exposed through a self-service portal or API, allowing users to instantly create or modify resources. It eliminates the traditional delays associated with manual provisioning and is a foundational requirement for elasticity in cloud environments.
- ✓
Broad network access
Why this is correct
Broad network access refers to the ability for cloud services to be accessed over the network using standard protocols from a wide variety of client platforms, including mobile phones, laptops, and workstations. This characteristic ensures that the cloud service is not restricted to a single physical location or device, and that users can access resources remotely via the internet or private networks. It relies on standardized mechanisms such as HTTP/HTTPS, SSH, and other open protocols to ensure compatibility across heterogeneous devices.
- ✓
Resource pooling
Why this is correct
Resource pooling enables the cloud provider's computing resources to be aggregated to serve multiple consumers using a multi-tenant model, with physical and virtual resources dynamically assigned and reassigned according to demand. Customers have no visibility into or control over the exact location of the underlying infrastructure, though they may specify location at a higher abstraction level like country or region. This pooling maximizes efficiency and economies of scale, allowing the provider to optimize utilization across the entire installed base rather than dedicating capacity to individual users.
- ✗
Dedicated hardware per tenant
Why it's wrong here
Dedicated hardware per tenant is not a characteristic of cloud computing because the model fundamentally relies on multi-tenancy and resource pooling, where physical infrastructure is shared among many customers. Dedicated hardware would require the cloud provider to allocate distinct physical components for each tenant, defeating the cost and utilization advantages that make cloud computing economical. While some vendors offer dedicated hosts as a premium option, that is a specific deployment choice, not a general defining attribute of cloud computing as described by NIST.
- ✗
Fixed pricing models
Why it's wrong here
Fixed pricing models are incompatible with the cloud computing principle of measured service and consumption-based billing, where customers pay only for the resources they actually use. Fixed pricing, such as a constant monthly fee regardless of usage, does not reflect the elasticity and pay-as-you-go nature that distinguishes cloud services from traditional data center procurement. Cloud providers typically offer variable pricing based on compute hours, storage consumed, data transfer, and other usage metrics, enabling customers to align costs directly with demand.
- ✗
Limited scalability
Why it's wrong here
Limited scalability is the opposite of what cloud computing offers; a core characteristic is rapid elasticity, which allows resources to be scaled out or in automatically in response to workload changes. Cloud platforms are designed to provide essentially unlimited capacity on demand, enabling organizations to grow from small to large workloads without needing to pre-purchase infrastructure. Limited scalability would negate the primary benefit of on-demand resource provisioning and is the inverse of the elasticity that NIST defines as a fundamental cloud characteristic.
Go deeper
Related to this question
About these practice questions
This MS-900 question is part of Courseiva's 794-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on MS-900
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. Which THREE are key characteristics of cloud computing as defined by NIST?
hard- A.High availability
- ✓ B.Broad network access
- ✓ C.Resource pooling
- ✓ D.On-demand self-service
- E.Reserved capacity
Why B: The NIST SP 800-145 definition of cloud computing lists five essential characteristics, and three of them appear here: Broad network access (B), Resource pooling (C), and On-demand self-service (D). Broad network access (B) is correct because cloud capabilities must be available over the network through standard mechanisms that promote use by heterogeneous thin or thick client platforms such as mobile phones, laptops, and PDAs. Resource pooling (C) is correct because the provider's computing resources are pooled to serve multiple consumers using a multi-tenant model, with physical and virtual resources dynamically assigned and reassigned according to demand. On-demand self-service (D) is correct because a consumer can unilaterally provision computing capabilities, such as server time and network storage, automatically without requiring human interaction with each service provider. The other two NIST characteristics not listed among the options are rapid elasticity and measured service. High availability (A) is a desirable quality attribute but is not one of the five NIST essential characteristics, and reserved capacity (E) describes a purchasing or pricing model rather than a defining characteristic of cloud computing.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MS-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-900 exam.