How do you identify whether Azure complies with the companys regional requirements?

A total of 230 exam questions to test your understanding and help you ace the Microsoft Azure Fundamentals exam!

Photo by Andrew Neel on Unsplash

Last updated: October 3, 2022

Question 161

Instruction

To complete the sentence, select the appropriate option in the answer area.

Question

Azure has more global regions than any other cloud provider—offering the scale and data residency options you need to bring your apps closer to your users around the world.

  1. Overview
  2. Select geography
  3. More information
  4. Additional resources

As a customer, you maintain ownership of customer data—the content, personal and other data you provide for storing and hosting in Azure services. You are also in control of any additional geographies where you decide to deploy your solutions or replicate your data.

Where a service's functionality requires global data replication, details are available below.

  • Microsoft secures your data using multiple layers of security and encryption protocols. Get an overview of how Microsoft uses encryption to secure your data.

    By default, Microsoft Managed Keys protect your data, and customer data that persists on any physical media is always encrypted using FIPS 140-2 compliant encryption protocols. Customers can also employ customer-managed keys (CMK), double encryption and/or hardware security modules (HSM) for increased data protection.

    All data traffic moving between datacenters is protected using IEEE 802.1AE MAC Security Standards, preventing physical "man-in-the-middle" attacks. To maintain resiliency, Microsoft uses variable network paths that sometimes cross Geo boundaries but replication of customer data between regions is always transmitted over encrypted network connections.

    Additionally, to minimize privacy risk, Microsoft generates pseudonymous identifiers that enable Microsoft to offer a global cloud service (including operating and improving services, billing, and fraud protection). In all cases, pseudonymous identifiers cannot be used to directly identify an individual, and access to the customer data that identifies individuals is always protected as described above.

  • All Azure services can be used in compliance with the GDPR. If customers using Azure services choose to transfer content containing personal data across borders, they will need to consider the legal requirements that apply to such transfers. Microsoft provides customers with services and resources to help them comply with GDPR requirements that may apply to their operations.

    Some Microsoft online services share data with third parties acting as its subprocessors. The publicly disclosed Microsoft Online Services Subprocessors List identifies subprocessors authorized to process customer data or personal data. All such subprocessors are contractually obligated to meet or exceed the contractual commitments Microsoft makes to its customers.

    Microsoft will not provide any third party (a) direct, blanket, or unfettered access to customers' data; (b) platform encryption keys used to secure data or the ability to break such encryption; or (c) access to data if Microsoft is aware that the data is to be used for purposes other than those stated in the third party's request. Further information on Microsoft’s approach to legal disclosure of customer data in relation to government demands is available here.

Select your geography

Most Azure services enable you to specify the region where your customer data will be stored and processed. Microsoft may replicate to other regions for data resiliency, but Microsoft will not store or process customer data outside the selected Geo. You and your users may move, copy, or access your customer data from any location globally.

Datacenter regionLocationAvailable to
East Asia Hong Kong All customers and partners
Southeast Asia Singapore All customers and partners

In some cases, data for certain services may be stored outside of specified regions. See Additional information on this page for details.

Products available

To learn about product availability in the Asia Pacific geo, go to Products available by region and select Asia Pacific from the Regions dropdown menu.

Datacenter regionLocationAvailable to
Australia Central Canberra All customers and partners
Australia Central 2 Canberra For Australia Central customers requiring in-country disaster recovery
Australia East New South Wales All customers and partners
Australia Southeast Victoria All customers and partners

In some cases, data for certain services may be stored outside of specified regions. See Additional information on this page for details.

Products available

To learn about product availability in the Australia geo, go to Products available by region and select Australia from the Regions dropdown menu.

Datacenter regionLocationAvailable to
Austria East Vienna Coming soon

In some cases, data for certain services may be stored outside of specified regions. See Additional information on this page for details.

Products available

Coming soon

Datacenter regionLocationAvailable to
Belgium Central Brussels Coming Soon

In some cases, data for certain services may be stored outside of specified regions. See Additional information on this page for details.

Products available

Coming soon

Datacenter regionLocationAvailable to
Brazil South São Paulo State All customers and partners
Brazil Southeast Rio de Janeiro Reserved for Brazil South customers requiring scenario-based in-country disaster recovery

In some cases, data for certain services may be stored outside of specified regions. See Additional information on this page for details.

Data residency

Brazil South: Data replication to the US.

Brazil Southeast: Data replication to the Brazil South.

See Additional information for details.

Products available

To learn about product availability in the Brazil geo, go to Products available by region and select Brazil from the Regions dropdown menu.

Datacenter regionLocationAvailable to
Canada Central Toronto All customers and partners
Canada East Quebec City All customers and partners

In some cases, data for certain services may be stored outside of specified regions. See Additional information on this page for details.

Products available

To learn about product availability in the Canada geo, go to Products available by region and select Canada from the Regions dropdown menu.

Datacenter regionLocationAvailable to
Central India Pune All customers and partners
India South Central Hyderabad All customers and partners
South India Chennai All customers and partners
West India Mumbai All customers and partners

In some cases, data for certain services may be stored outside of specified regions. See Additional information on this page for details.

Products available

To learn about product availability in the India geo, go to Products available by region and select India from the Regions dropdown menu.

Datacenter regionLocationAvailable to
Chile Central Santiago Coming soon

In some cases, data for certain services may be stored outside of specified regions. See Additional information on this page for details.

Products available

Coming soon

Datacenter regionLocationAvailable to
China East Shanghai Organizations with a business presence in China
China East 2 Shanghai Organizations with a business presence in China
China East 3 Jiangsu Reserved for China North 3 customers requiring in-country disaster recovery
China North Beijing Organizations with a business presence in China
China North 2 Beijing Organizations with a business presence in China
China North 3 Hebei Organizations with a business presence in China

In some cases, data for certain services may be stored outside of specified regions.

Data residency

Azure in China is a separate service sold and operated by 21Vianet. For customers of Azure operated by 21Vianet, this map outlines the locations of datacenters where 21Vianet stores customer data. 21Vianet may replicate customer data in at least two datacenters for data resiliency and availability but always within China. The exceptions below for regional and non-regional services do not apply.

Datacenter regionLocationAvailable to
Denmark East Copenhagen Coming soon

In some cases, data for certain services may be stored outside of specified regions. See Additional information on this page for details.

Products available

Coming soon

Datacenter regionLocationAvailable to
North Europe Ireland All customers and partners
West Europe Netherlands All customers and partners

In some cases, data for certain services may be stored outside of specified regions. See Additional information on this page for details.

Products available

To learn about product availability in the Europe geo, go to Products available by region and select Europe from the Regions dropdown menu.

Datacenter regionLocationAvailable to
Finland Central Helsinki Coming Soon

In some cases, data for certain services may be stored outside of specified regions. See Additional information on this page for details.

Products available

Coming soon

Datacenter regionLocationAvailable to
France Central Paris All customers and partners
France South Marseille Reserved for France Central customers requiring in-country disaster recovery

In some cases, data for certain services may be stored outside of specified regions. See Additional information on this page for details.

Products available

To learn about product availability in the France geo, go to Products available by region and select France from the Regions dropdown menu.

Datacenter regionLocationAvailable to
Germany Central (Sovereign) Frankfurt Organizations that have already purchased Microsoft Cloud Germany (Sovereign)
Germany North Berlin Germany West Central customers requiring in-country disaster recovery
Germany Northeast (Sovereign) Magdeburg Organizations that have already purchased Microsoft Cloud Germany (Sovereign)
Germany West Central Frankfurt All customers and partners

In some cases, data for certain services may be stored outside of specified regions. See Additional information on this page for details.

Data residency

Azure Germany Public cloud regions: Stored at rest in Germany. See Additional information for details.

Products available

To learn about product availability in the Germany geo, go to Products available by region and select Germany from the Regions dropdown menu.

Datacenter regionLocationAvailable to
Greece Central Athens Coming soon

In some cases, data for certain services may be stored outside of specified regions. See Additional information on this page for details.

Products available

Coming soon

Datacenter regionLocationAvailable to
Indonesia Central Jakarta Coming soon

In some cases, data for certain services may be stored outside of specified regions. See Additional information on this page for details.

Products available

Coming soon

Datacenter regionLocationAvailable to
Israel Central Israel Coming soon

In some cases, data for certain services may be stored outside of specified regions. See Additional information on this page for details.

Products available

Coming soon

Datacenter regionLocationAvailable to
Italy North Milan Coming soon

In some cases, data for certain services may be stored outside of specified regions. See Additional information on this page for details.

Products available

Coming soon

Datacenter regionLocationAvailable to
Japan East Tokyo, Saitama All customers and partners
Japan West Osaka All customers and partners

In some cases, data for certain services may be stored outside of specified regions. See Additional information on this page for details.

Products available

To learn about product availability in the Japan geo, go to Products available by region and select Japan from the Regions dropdown menu.

Datacenter regionLocationAvailable to
Korea Central Seoul All customers and partners
Korea South Busan Reserved for Korea Central customers requiring in-country disaster recovery

In some cases, data for certain services may be stored outside of specified regions. See Additional information on this page for details.

Products available

To learn about product availability in the Korea geo, go to Products available by region and select Korea from the Regions dropdown menu.

Datacenter regionLocationAvailable to
Malaysia West Kuala Lumpur Coming soon

In some cases, data for certain services may be stored outside of specified regions. See Additional information on this page for details.

Products available

Coming soon

Datacenter regionLocationAvailable to
Mexico Central Querétaro State Coming soon

In some cases, data for certain services may be stored outside of specified regions. See Additional information on this page for details.

Products available

Coming soon

Datacenter regionLocationAvailable to
New Zealand North Auckland Coming soon

In some cases, data for certain services may be stored outside of specified regions. See Additional information on this page for details.

Products available

Coming soon

Datacenter regionLocationAvailable to
Norway East Oslo All customers and partners
Norway West Stavanger Reserved for Norway East customers requiring in-country diaster recovery

In some cases, data for certain services may be stored outside of specified regions. See Additional information on this page for details.

Products available

To learn about product availability in the Norway geo, go to Products available by region and select Norway from the Regions dropdown menu.

Datacenter regionLocationAvailable to
Poland Central Warsaw Coming soon

In some cases, data for certain services may be stored outside of specified regions. See Additional information on this page for details.

Products available

Coming soon

Datacenter regionLocationAvailable to
Qatar Central Doha All customers and partners

In some cases, data for certain services may be stored outside of specified regions. See Additional information on this page for details.

Products available

To learn about product availability in the Qatar geo, go to Products available by region and select Qatar from the Regions dropdown menu.

Datacenter regionLocationAvailable to
South Africa North Johannesburg All customers and partners
South Africa West Cape Town Reserved for South Africa North customers requiring in-country disaster recovery

In some cases, data for certain services may be stored outside of specified regions. See Additional information on this page for details.

Products available

To learn about product availability in the Africa geo, go to Products available by region and select Africa from the Regions dropdown menu.

Datacenter regionLocationAvailable to
Spain Central Madrid Coming soon

In some cases, data for certain services may be stored outside of specified regions. See Additional information on this page for details.

Products available

Coming soon

Datacenter regionLocationAvailable to
Sweden Central Gävle All customers and partners
Sweden South Staffanstorp Reserved for Sweden Central customers requiring in-country disaster recovery

In some cases, data for certain services may be stored outside of specified regions. See Additional information on this page for details.

Products available

To learn about product availability in the Sweden geo, go to Products available by region and select Sweden from the Regions dropdown menu.

Datacenter regionLocationAvailable to
Switzerland North Zürich All customers and partners
Switzerland West Geneva Reserved for Switzerland North customers requiring in-country disaster recovery

In some cases, data for certain services may be stored outside of specified regions. See Additional information on this page for details.

Products available

To learn about product availability in the Switzerland geo, go to Products available by region and select Switzerland from the Regions dropdown menu.

Datacenter regionLocationAvailable to
Taiwan North Taipei Coming soon

In some cases, data for certain services may be stored outside of specified regions. See Additional information on this page for details.

Products available

Coming soon

Datacenter regionLocationAvailable to
UAE Central Abu Dhabi Reserved for UAE North customers requiring in-country disaster recovery
UAE North Dubai All customers and partners

In some cases, data for certain services may be stored outside of specified regions. See Additional information on this page for details.

Products available

To learn about product availability in the United Arab Emirates geo, go to Products available by region and select United Arab Emirates from the Regions dropdown menu.

Datacenter regionLocationAvailable to
UK South London All customers and partners
UK West Cardiff All customers and partners

In some cases, data for certain services may be stored outside of specified regions. See Additional information on this page for details.

Products available

To learn about product availability in the United Kingdom geo, go to Products available by region and select United Kingdom from the Regions dropdown menu.

Datacenter regionLocationAvailable to
Central US Iowa All customers and partners
East US Virginia All customers and partners
East US 2 Virginia All customers and partners
East US 3 Georgia Coming soon
North Central US Illinois All customers and partners
South Central US Texas All customers and partners
West Central US Wyoming All customers and partners
West US California All customers and partners
West US 2 Washington All customers and partners
West US 3 Arizona All customers and partners

In some cases, data for certain services may be stored outside of specified regions. See Additional information on this page for details.

Products available

To learn about product availability in the United States geo, go to Products available by region and select United States from the Regions dropdown menu.

Datacenter regionLocationAvailable to
US DoD Central Iowa Reserved for exclusive use by the Department of Defense
US DoD East Virginia Reserved for exclusive use by the Department of Defense
US Gov Arizona Arizona US government entities and their partners only
US Gov Texas Texas US government entities and their partners only
US Gov Virginia Virginia US government entities and their partners only
US Sec East Undisclosed US government entities and their partners only
US Sec West Undisclosed US government entities and their partners only
US Sec West Central Undisclosed US government entities and their partners only

In some cases, data for certain services may be stored outside of specified regions.

Data residency

Azure Government is sold separately to qualifying government customers. For customers of Azure Government, this map outlines the locations of datacenters where Microsoft stores customer data. Microsoft may replicate customer data in at least two datacenters for data resiliency and availability but always within the Azure Government regions. The exceptions below for regional and non-regional services do not apply.

More information on customer data location

Data storage for regional services

Most Azure services are deployed regionally and enable the customer to specify the region into which the service will be deployed. Examples of such Azure services include virtual machines, storage, and SQL Database. For a complete list of regional services, see Products available by region.

Microsoft will not store or process customer data outside the customer-specified Geo without your authorization.

Microsoft may copy customer data between regions within a given Geo for data redundancy or other operational purposes. For example, geo-redundant storage replicates Blob, File, Queue and Table data between two regions within the same Geo for enhanced data durability in case of a major datacenter disaster.

Microsoft personnel (including subprocessors) located outside the Geo may remotely operate data processing systems in the Geo but will not access Customer Data without your authorization.

The following services may store or process certain data outside the specified Geo:

  • Azure Cloud Services, which backs up web and worker-role software deployment packages to the United States regardless of the deployment region.
  • Azure Data Explorer (ADX) stores partial usage data and service traces on a central cluster located in the EU for a limited time.
  • Language Understanding, which may store active learning data in the United States, Europe, or Australia based on the authoring regions which the customer uses. Learn more
  • Azure Machine Learning, may store freeform texts of asset names that the customer provides (such as names for workspaces, names for resource groups, names for experiments, names of files, and names of images) and experiment execution parameters aka experiment metadata in the United States for debugging purposes.
  • Azure Databricks, which stores identity data, and certain table names and object path information in the United States.
  • Azure Serial Console, which stores all customer data at rest in the Geo selected by customer, but when used through the Azure Portal may process console commands and responses outside of the Geo for the sole purpose of providing the Console experience inside the Portal.
  • Preview, beta, or other prerelease services, which typically store customer data in the United States but may store it globally.

Customers can configure the following Azure services, tiers, or plans to store customer data only in a single region:

1Single region data residency is provided by default currently only in the Southeast Asia Region (Singapore) of the Asia Pacific Geo and Brazil South (Sao Paulo State) Region of Brazil Geo. For all other regions, customer data is stored in Geo.

2Single region data residency is provided by default currently only in the Southeast Asia Region (Singapore) of the Asia Pacific Geo. For all other regions, customer data is stored in Geo.

3The previewed feature to enable storing customer data in a single region is currently only available in the Southeast Asia Region (Singapore) of the Asia Pacific Geo and Brazil South (Sao Paulo State) Region of Brazil Geo. For all other regions, customer data is stored in Geo.

4For Azure Databricks, identity data, certain table names and object path information are stored in the United States. The capability to enable storing all other customer data in a single region is currently available in the Southeast Asia Region (Singapore) of the Asia Pacific Geo and Brazil South (Sao Paulo State) Region of the Brazil Geo. For all other regions, customer data is stored in Geo (subject to the aforementioned exception).

5ZRS Classic, GRS/RA-GRS, GZRS/RA-GZRS stores data in multiple regions.

Data storage for non-regional services

Certain Azure services do not enable the customer to specify the region where the service will be deployed. These services may store or process customer data in any Microsoft datacenter within Azure public regions, unless otherwise specified.

  • Azure Content Delivery Network, which provides a global caching service and stores customer data at edge locations around the world. Azure CDN POP locations by region.
  • Azure Active Directory (Azure AD), which may store Azure AD data globally. This does not apply to Azure AD deployments in the United States (where Azure AD data is stored solely in the United States) and in Europe (where Azure AD data is stored in Europe or the United States). Learn more
  • Azure Multi-Factor Authentication, which stores authentication data in the United States. Learn more
  • Microsoft Defender for Cloud, which may store a copy of security-related customer data, collected from or associated with a customer resource (such as virtual machine or Azure AD tenant):

    (a) in the same Geo as that resource, except in those Geos where Microsoft has yet to deploy Microsoft Defender for Cloud, in which case a copy of such data will be stored in the United States; and

    (b) where Microsoft Defender for Cloud uses another Microsoft Online Service to process such data, it may store such data in accordance with the geolocation rules of that other Online Service.

  • Microsoft Defender for IoT may use other Microsoft Online Services to process security-related customer data, this data may be stored in accordance with the geolocation rules of that other Online Service.
  • Services that provide global routing functions and do not themselves process or store customer data. This includes Azure Traffic Manager—which provides load balancing between different regions—and Azure DNS—which provides domain name services that route to different regions.

What should you use to evaluate whether your company's Azure environment meets?

What should you use to evaluate whether your company's Azure environment meets regulatory requirements? Microsoft Defender for Cloud helps streamline the process for meeting regulatory compliance requirements, using the regulatory compliance dashboard.
You can access Azure audit reports and related documentation via the Service Trust Portal (STP). You must sign in to access audit reports on the STP. For more information, see Get started with Microsoft Service Trust Portal.

Is it true that Azure Security Center can be used to monitor both Azure resources and on

In addition, non-Azure (including on-premises) machines can also be monitored by Azure Security Center. Both Windows machines and Linux machines are supported.

Which two types of customers are eligible to use Azure Government to develop?

Azure Government is offered exclusively to three customer groups: I am a US Government entity, such as: Federal agency (a bureau, department or other US government entity) State or local entity.