Microsoft Security Operations Analyst Associate SC-200 Practice Question
Your organization has Azure resources in two regions: East US and Germany West Central. European privacy regulations require that security log data generated by resources in Germany must remain within the EU. Security operations analysts based in East US need the ability to run hunting queries that correlate data from both regions with the least possible data-egress cost. When planning the Microsoft Sentinel deployment, which workspace design should you choose?
Create one Log Analytics workspace in East US and another in Germany West Central, enable Microsoft Sentinel on each, and use cross-workspace queries for centralized analysis.
Create workspaces in each region, enable Sentinel only in East US, and configure continuous data export from the German workspace to the East US workspace for analysis.
Create a single Microsoft Sentinel workspace in East US and configure all German resources to send their logs to that workspace.
Create a single Microsoft Sentinel workspace in Germany West Central and direct all East US resources to send their logs to that workspace.
Creating a separate Microsoft Sentinel-enabled Log Analytics workspace in each region keeps the German data inside the EU, meeting the data-residency requirement. Analysts can run cross-workspace queries or use workbooks to correlate events; these operations retrieve only the query results across regions, so egress is limited to the returned dataset rather than continuous streaming of all raw logs. Centralizing all logs in either region, or exporting EU logs to a non-EU workspace, would violate the residency mandate and, in the case of sending East US data to Europe, would also increase ongoing egress costs. Therefore, enabling Sentinel on a dedicated workspace in each region while using cross-workspace analytics provides compliance and minimizes data-transfer charges.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What are cross-workspace queries in Microsoft Sentinel?
Open an interactive chat with Bash
How does enabling Microsoft Sentinel in multiple regions help with compliance requirements?
Open an interactive chat with Bash
What are some cost considerations when using cross-workspace queries in Microsoft Sentinel?
Open an interactive chat with Bash
Microsoft Security Operations Analyst Associate SC-200
Manage a security operations environment
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .