SC-200 Practice Question 3710
Exam: SC-200
Domain: Manage a security operations environment
Difficulty: hard
What is the purpose of configuring "Auxiliary logs" or "Basic logs" in an Azure Log Analytics workspace hosting Microsoft Sentinel?
Answer Options
A
Provides low-cost ingestion tiers for high-volume, low-value debugging logs
B
Deletes all incoming logs immediately to eliminate costs
C
Overclocks Log Analytics workspace processors
D
Encrypts user files with BitLocker
Correct Answer
A: Provides low-cost ingestion tiers for high-volume, low-value debugging logs
Explanation
Basic Logs and Auxiliary Logs offer low-cost ingestion tiers for high-volume, low-value debugging or network logs (e.g., NetFlow, VPC flow), with lower query performance and reduced costs.