Azure Datacenters
😟 THE PROBLEM
Your company would need a building, power, cooling and guards just to run servers.
😊 THE SOLUTION
Use Microsoft’s datacenters, grouped into zones and regions.
- Building a datacenter costs millions✓ Rent capacity in Microsoft’s
- Physical security is hard to do well✓ Microsoft secures every building
- Auditors want proof✓ Download reports from the Service Trust Portal
Quick answer
Azure datacenters are the physical buildings around the world that house the servers, storage and networking equipment running Azure. You never pick an individual datacenter. Datacenters are grouped into availability zones, and zones are grouped into regions, which is the level you choose.
Exam objective: 2.1.3 Describe Azure datacenters. (Skills measured as of July 20, 2026)
Start with a question
Where does “the cloud” actually live?
It is not in the sky. The cloud lives in enormous, highly secure buildings full of servers, humming day and night. These are datacenters.
Explain it like I’m 10
The technical explanation
Azure datacenters are facilities containing racks of servers, storage systems and network equipment, with dedicated power, cooling and networking. Microsoft builds and operates them, and they are protected by layered physical security: perimeter fences, security staff, cameras, biometric access controls and strict processes for destroying old disks.
-
1 Datacenter
A physical building with servers, power and cooling.
-
2 Availability zone
One or more datacenters with independent power, cooling and networking.
-
3 Region
A geographic area with one or more datacenters, often three or more zones.
-
4 Geography
A market such as Europe or the US, containing regions.
You do not choose a datacenter directly. You choose a region, and for zonal services an availability zone. Azure decides which datacenter and server your resource runs on.
Real-world business scenario
A hospital group
- The problem
- Auditors asked how patient data was physically protected after the hospital moved to Azure.
- What they used
- Used the Microsoft Service Trust Portal to download independent audit reports covering Azure datacenter security.
- Why that choice
- Physical security is Microsoft's responsibility, so evidence comes from Microsoft's certified audits.
- The result
- The audit passed using Microsoft's reports for the physical layer and the hospital's own evidence for data and access controls.
When to use it and when not to
✓ Use it when…
- Think about datacenters when explaining how zones and regions work.
- Rely on Microsoft compliance reports for physical security evidence.
✕ Think twice when…
- Designing as if you could place resources in a particular building. Design with zones and regions instead.
Interview preparation
Say your answer out loud first, then open the model answer. Interviewers care more about your reasoning than the exact words.
Beginner What is an Azure datacenter, and can you choose one?
Model answer
It is a physical building full of servers, storage and network equipment that run Azure. I cannot choose a specific datacenter. I choose a region, and optionally an availability zone, and Azure places my resources in a datacenter there.
Intermediate How do datacenters, availability zones and regions relate?
Model answer
Datacenters are the physical buildings. One or more datacenters with independent power, cooling and networking form an availability zone. Several zones, or one or more datacenters in regions without zones, form a region.
Experienced developer Who is responsible for datacenter security in Azure, and how would you prove it to an auditor?
Model answer
Microsoft is always responsible for physical datacenter security under the shared responsibility model. For evidence I would use the Microsoft Service Trust Portal, which provides third-party audit reports such as ISO 27001 and SOC reports, rather than trying to inspect the facilities myself.
Test yourself with exercises
3 original practice questions in the AZ-900 style. Pick your answers, then check them. You will see why each option is right or wrong. Score 75% or more and this topic is marked complete.
Quick revision
Key points
- Datacenters are the physical buildings that run Azure.
- Datacenter → availability zone → region.
- Customers choose regions (and zones), never individual datacenters.
- Microsoft is always responsible for physical datacenter security.
Important terminology
- Datacenter
- A secure building with racks of servers, power, cooling and networking.
- Rack
- A frame holding many servers and network switches inside a datacenter.
- Physical security
- Controls such as fences, guards, cameras and multi-step access checks that protect the building and hardware.
Common mistakes
- Thinking you can pick a specific datacenter for your resources.
Exam tips
- "Physical security of the building" is always Microsoft's responsibility.
Five quick revision questions
-
1.Can you choose an individual Azure datacenter?Show
No. You choose a region and optionally an availability zone.
-
2.What do one or more datacenters with independent power, cooling and networking form?Show
An availability zone.
-
3.Who secures Azure datacenters?Show
Microsoft.
-
4.Where can you find Azure compliance audit reports?Show
The Microsoft Service Trust Portal.
-
5.What is in a datacenter?Show
Servers, storage, networking equipment, power and cooling systems.
Official references
Finished this lesson? Tick it off. Your progress is saved in this browser.
Next up: Resources and Resource Groups