Prepare and test your skills

Prepare and test your skills

Free sample question, answered and explained below. The AZ-900 Microsoft Azure Fundamentals Exam practice bank has 688 more like it. Try 10 free: instant score, no account.
A United States government agency is planning to migrate sensitive citizen data and critical workloads to the cloud. The organization must adhere to strict regulatory mandates requiring physical isolation from commercial cloud infrastructure and access restricted exclusively to screened personnel.
Which Azure offering should the agency select to meet these compliance requirements?
Azure Government is a dedicated sovereign cloud environment specifically built to address the rigorous security, compliance, and data residency requirements of United States federal, state, local, and tribal government agencies, as well as their authorized solution providers.
Standard commercial cloud regions cannot provide the mandatory physical isolation or screened personnel restrictions required by US government agencies. Azure Government delivers a purpose-built sovereign cloud designed specifically to handle these regulatory constraints without compromising on modern cloud capabilities.
Global Azure commercial regions represent Microsoft's worldwide public cloud network, comprising dozens of geographic regions designed for general commercial enterprises, organizations, and developers across the globe.
While commercial Azure adheres to broad enterprise standards and extensive international compliance frameworks (such as ISO 27001, SOC 2, and general FedRAMP levels), it does not provide physical isolation from non-government workloads, nor does it restrict all operational staff exclusively to screened US personnel.
This option would be ideal if the organization were a standard global commercial enterprise or multinational business seeking standard data residency within local geographical regions without federal isolation mandates.
Commercial Azure regions are separated logically by Azure Resource Manager, but regulatory compliance for sovereign government entities requires physical and architectural isolation.
Azure Availability Zones are physically separate datacenters located within a single Azure region. Each zone possesses independent power, cooling, and networking infrastructure to protect applications against local datacenter failures.
Availability Zones are high-availability architectural components built for fault tolerance and resilience, not compliance or physical isolation between government and commercial tenants. Placing workloads across availability zones within a commercial region does not isolate them from non-government users.
The scenario required protecting an application against localized hardware failures, power outages, or physical datacenter disasters within a single geographic region.
Availability Zones are often leveraged inside sovereign clouds like Azure Government to achieve both high availability and stringent compliance simultaneously.
An Azure Region Pair consists of two distinct regions located within the same broad geography (typically at least 300 miles apart) that are coupled together to facilitate business continuity and disaster recovery (BCDR).
Region pairs address disaster recovery and geographical redundancy, ensuring that sequential platform updates and regional failovers occur safely. However, region pairing in standard commercial regions does not isolate workloads from commercial infrastructure or provide vetted personnel guarantees.
The requirement asked for a mechanism to automatically protect data against catastrophic regional disasters and large-scale natural events through cross-region replication.
While Azure Government maintains its own dedicated paired regions within the US, specifying region pairs alone does not address the sovereign cloud requirement.
Answer them yourself and get your score the moment you finish. No account needed.
Full access includes
Keep the momentum going with these hand-picked practice scenarios
Last updated Validated