nerdexam
Microsoft

SC-100 · Question #339

Your network contains an on-premises Active Directory Domain Services (AD DS) domain named Domain1. Domain1 contains 10 domain controllers. You have an Azure subscription named Sub1 that contains a Mi

Sign in or unlock SC-100 to reveal the answer and full explanation for question #339. The question stem and answer options stay visible for context.

Design security operations, identity, and compliance capabilities

Question

Your network contains an on-premises Active Directory Domain Services (AD DS) domain named Domain1. Domain1 contains 10 domain controllers. You have an Azure subscription named Sub1 that contains a Microsoft Sentinel workspace named WS1. You have a Microsoft 365 subscription that contains 5,000 users. Each user is assigned a Microsoft 365 E3 license. You need to recommend a solution to ingest security logs from all the domain controllers into WS1. The solution must meet the following requirements:

  • The cost of ingesting data into WS1 must be minimized.
  • WS1 must ingest all the Windows Security event logs generated by the

domain controllers.

  • The solution must support the generation of approximately 350 MB of

logs per day from each domain controller. What should you recommend?

Options

  • AUpgrade the user licenses to Microsoft 365 E5.
  • BOnboard each domain controller to Microsoft Defender for Servers Plan 2.
  • CConfigure Auxiliary logs in WS1.
  • DConfigure a volume cap for WS1.
  • EOnly ingest data from one domain controller into WS1.

Unlock SC-100 to see the answer

You've previewed enough free SC-100 questions. Unlock SC-100 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#Microsoft Sentinel#Data Ingestion#Cost Optimization#Active Directory#Microsoft 365 E5 Licensing
Full SC-100 Practice