Forms is an Office 365 Tier-D service and part of the Office 365 compliance program. More information about Office 365 compliance is available at the Microsoft Trust Center.
Yes, by assigning licenses to users, you control whom in your organization can access Forms.
External sharing is disabled for GCC High environments. Learn more.
Customers can learn more at https://support.office.com/en-us/forms.