AZ-900 Practice Question 91: Azure Government Sovereign Cloud
Microsoft Azure Fundamentals (AZ-900) · Test 10 · question 1 of 10
A US state agency must host a workload in a cloud environment that uses physically isolated datacenters and networks located only in the US, with access to systems processing its data limited to screened US persons, to meet government security and compliance requirements. Which Azure offering is designed for this?
Show answer and explanation
Answer:
Azure Government is a separate, dedicated cloud for US government agencies and their partners. Microsoft states it "uses physically isolated datacenters and networks located in the US only," adding "an extra layer of protection... through contractual commitments regarding storage of customer data in the US and limiting potential access to systems processing customer data to screened US persons", matching the stem's requirement exactly. Eligibility is restricted to US federal, state, and local government entities and their partners.
Option A is wrong because a resource lock only prevents accidental deletion or modification of a resource; it has nothing to do with where data is physically stored or who can access the underlying systems. Option C is wrong because a region pair is a resiliency feature for geo-redundant replication within global Azure; it doesn't provide the physical isolation or personnel-screening guarantees the agency needs. Option D is wrong because a management group is an organizational construct for applying policy and RBAC across subscriptions in the same Azure environment; it doesn't change which datacenters host the data or who can access them.
Reference: Azure Government Overview