Cloud deployment models (public, private, hybrid) in Azure - Commands & Configuration

Introduction

Cloud deployment models describe where and how cloud services are hosted and accessed. They solve the problem of choosing the right environment for your applications and data based on security, control, and cost needs.

When you want to use cloud services managed by a provider without managing hardware, use a public cloud.

When your company needs full control over data and infrastructure for security, use a private cloud.

When you want to combine both public and private clouds to balance flexibility and control, use a hybrid cloud.

When you need to keep sensitive data on-premises but use cloud for extra capacity during peak times.

When you want to test new applications in the public cloud before moving them to your private cloud.

Commands

This command shows details about your current Azure subscription and environment, helping you confirm you are connected to the public cloud.

Terminal

az account show

Expected Output

{

  "environmentName": "AzureCloud",

  "id": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",

  "isDefault": true,

  "name": "My Azure Subscription",

  "state": "Enabled",

  "tenantId": "yyyyyyyy-yyyy-yyyy-yyyy-yyyyyyyyyyyy",

  "user": {

    "name": "[e-mail]",

    "type": "user"

  }

}

This command checks the status of a private cloud machine connected to Azure Arc, showing how private resources can be managed from Azure.

Terminal

az connectedmachine show --name my-private-machine --resource-group my-resource-group

Expected Output

{

  "name": "my-private-machine",

  "resourceGroup": "my-resource-group",

  "status": "Connected",

  "osName": "Windows Server 2019",

  "location": "eastus"

}

→

--name - Specifies the name of the connected machine

→

--resource-group - Specifies the Azure resource group containing the machine

This command creates a virtual network in Azure to connect resources in a hybrid cloud setup, allowing communication between public and private environments.

Terminal

az network vnet create --name hybrid-vnet --resource-group my-resource-group --address-prefixes 10.0.0.0/16 --subnet-name hybrid-subnet --subnet-prefix 10.0.1.0/24

Expected Output

{

  "newVNet": {

    "addressSpace": {

      "addressPrefixes": [

        "10.0.0.0/16"

      ]

    },

    "location": "eastus",

    "name": "hybrid-vnet",

    "resourceGroup": "my-resource-group",

    "subnets": [

      {

        "name": "hybrid-subnet",

        "addressPrefix": "10.0.1.0/24"

      }

    ]

  }

}

→

--name - Sets the name of the virtual network

→

--resource-group - Specifies the resource group for the network

→

--address-prefixes - Defines the IP address range for the virtual network

Key Concept

If you remember nothing else from this pattern, remember: public clouds share resources managed by providers, private clouds are dedicated to you, and hybrid clouds combine both for flexibility.

Common Mistakes

Trying to manage private cloud resources without connecting them to Azure Arc.

Azure cannot manage private resources unless they are connected, so you won't see or control them from Azure.

Use Azure Arc to connect private machines to Azure for unified management.

Creating a virtual network without specifying the correct address space.

Incorrect address space can cause IP conflicts or prevent resources from communicating properly.

Plan and specify non-overlapping IP ranges when creating virtual networks.

Assuming public cloud data is private and secure without additional controls.

Public cloud data is shared infrastructure; sensitive data needs encryption and access controls.

Use encryption and identity management to protect data in public clouds.

Summary

Use 'az account show' to confirm you are working in the public Azure cloud environment.

Use Azure Arc commands like 'az connectedmachine show' to manage private cloud resources connected to Azure.

Create virtual networks with 'az network vnet create' to enable hybrid cloud connectivity between public and private resources.

Practice

1. Which cloud deployment model is shared among multiple organizations and accessible over the internet?

easy

A. Public cloud

B. Private cloud

C. Hybrid cloud

D. Community cloud

Solution

1. Step 1: Understand public cloud characteristics

   Public cloud resources are shared and accessible to many users over the internet.

2. Step 2: Compare with other models

   Private cloud is dedicated to one organization; hybrid mixes both. Community cloud is shared by a specific group, not open to all.

3. Final Answer:

   Public cloud -> Option A

4. Quick Check:

   Shared and open = Public cloud [OK]

Hint: Shared and open means public cloud [OK]

Common Mistakes:

• Confusing private cloud as shared
• Thinking hybrid is fully public
• Mixing community cloud with public cloud

2. Which of the following is the correct description of a private cloud?

easy

A. Cloud resources shared publicly over the internet

B. Cloud infrastructure dedicated to a single organization

C. Combination of public and private clouds

D. Cloud services managed by a third-party for multiple organizations

Solution

1. Step 1: Define private cloud

   Private cloud means cloud infrastructure is dedicated to one organization only.

2. Step 2: Eliminate other options

   Public cloud is shared publicly, hybrid is a mix, and third-party managed multi-org is community or public cloud.

3. Final Answer:

   Cloud infrastructure dedicated to a single organization -> Option B

4. Quick Check:

   Dedicated to one org = Private cloud [OK]

Hint: Dedicated to one organization means private cloud [OK]

Common Mistakes:

• Choosing public cloud for private cloud definition
• Confusing hybrid cloud with private cloud
• Thinking third-party management means private cloud

3. A company uses a cloud setup where sensitive data is stored on their own servers, but they use public cloud services for less critical workloads. What type of cloud deployment model is this?

medium

A. Public cloud

B. Private cloud

C. Hybrid cloud

D. Community cloud

Solution

1. Step 1: Analyze the setup

   Sensitive data on private servers means private cloud; less critical workloads on public cloud means public cloud.

2. Step 2: Identify the combined model

   Using both private and public clouds together is called hybrid cloud.

3. Final Answer:

   Hybrid cloud -> Option C

4. Quick Check:

   Mix of private and public = Hybrid cloud [OK]

Hint: Mix of private and public clouds is hybrid [OK]

Common Mistakes:

• Choosing private cloud only
• Confusing community cloud with hybrid
• Selecting public cloud ignoring private part

4. Identify the error in this cloud deployment description: "A hybrid cloud stores all data on public cloud servers but uses private cloud for running applications."

medium

A. Hybrid cloud cannot use public cloud servers

B. Private cloud cannot run applications

C. Hybrid cloud must use community cloud services

D. Data storage and application hosting roles are reversed

Solution

1. Step 1: Understand hybrid cloud roles

   Hybrid cloud mixes private and public clouds, typically sensitive data is kept private, apps can run anywhere.

2. Step 2: Spot the reversed roles

   The description says all data is on public cloud but apps run on private cloud, which is unusual and reversed from best practice.

3. Final Answer:

   Data storage and application hosting roles are reversed -> Option D

4. Quick Check:

   Data usually private, apps flexible = Roles reversed [OK]

Hint: Data usually private, apps flexible in hybrid [OK]

Common Mistakes:

• Thinking hybrid can't use public cloud
• Believing private cloud can't run apps
• Confusing community cloud with hybrid

5. A company wants to keep customer financial data highly secure on their own servers but also wants to quickly scale their website traffic using cloud resources. Which deployment model should they choose and why?

hard

A. Hybrid cloud, because it combines secure private storage with scalable public resources

B. Private cloud, because it allows unlimited scaling without sharing resources

C. Public cloud, because it offers the best security for financial data

D. Community cloud, because it shares resources with similar companies

Solution

1. Step 1: Identify security needs

   Financial data needs high security, best kept on private servers.

2. Step 2: Identify scaling needs

   Website traffic can be handled by scalable public cloud resources.

3. Step 3: Match deployment model

   Hybrid cloud combines private security with public scalability, fitting both needs.

4. Final Answer:

   Hybrid cloud, because it combines secure private storage with scalable public resources -> Option A

5. Quick Check:

   Secure + scalable = Hybrid cloud [OK]

Hint: Secure data + scale = hybrid cloud [OK]

Common Mistakes:

• Choosing public cloud for sensitive data
• Assuming private cloud scales unlimited
• Confusing community cloud with hybrid