ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam SC-200 All Questions

View all questions & answers for the SC-200 exam
Go to Exam

Exam SC-200 topic 3 question 58 discussion

Actual exam question from Microsoft's SC-200
Question #: 58
Topic #: 3
[All SC-200 Questions]

HOTSPOT
-

You have an Azure subscription.

You plan to implement a Microsoft Sentinel workspace. You anticipate that you will ingest 20 GB of security log data per day.

You need to configure storage for the workspace. The solution must meet the following requirements:

• Minimize costs for daily ingested data.
• Maximize the data retention period without incurring extra costs.

What should you do for each requirement? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Show Suggested Answer Hide Answer
Suggested Answer:
by david124 at Jan. 17, 2023, 2 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
[Removed]
Highly Voted 2 years, 4 months ago
I got a total cost of 104.40 (20 G) vs 342.52 (100g Commitment) per day. Pay as you go is the better choice.
upvoted 17 times
Fez786
1 year, 9 months ago
so whats the correct answer? PAYG 90 DAYS ??
upvoted 6 times
Ramye
1 year, 4 months ago
Correct ---documented here: https://azure.microsoft.com/en-ca/pricing/details/microsoft-sentinel/ With the commitment option, the least amount you can commit is 100 GB which is more expensive than PAYG for 20 GB / day data ingestion.
upvoted 5 times
...
...
...
david124
Highly Voted 2 years, 5 months ago
https://azure.microsoft.com/en-us/pricing/details/microsoft-sentinel/?cdn=disable PAYG sounds more practical here due to the commitment tier being 100gb which is much more than 20gb.
upvoted 12 times
david124
2 years, 5 months ago
For daily ingestion
upvoted 1 times
evilprime
2 years, 3 months ago
the 100gb tier is max gb's a day, the price per gb is lower then the daily gb price as the payg model. So in the end the 100gb per day is cheaper for the 20gb.
upvoted 1 times
evilprime
2 years, 3 months ago
ah the tier is a fixed fee, nevermind.
upvoted 1 times
...
...
...
...
Onimole
Most Recent 3 months, 1 week ago
Commitment tiers In addition to the pay-as-you-go model, Log Analytics has commitment tiers, which can save you as much as 30 percent compared to the pay-as-you-go price for Analytics Logs. With commitment tier pricing, you can commit to buy data ingestion for a workspace, starting at 100 GB per day
upvoted 1 times
...
smanzana
11 months ago
PAYG 90 days
upvoted 5 times
talosDevbot
8 months, 3 weeks ago
Answer 1: PAYG PAYG = $104.4/day (current price of $5.22/GB * 20) Commitment tier = $342.52/day (rate of the 100GB/day which is the lowest and cheapest commitment tier) Answer 2: 90 days "Retention beyond 90 days and up to 2 years will be charged per the standard Azure Monitor retention prices"
upvoted 2 times
...
...
ostralo
1 year, 3 months ago
20G per day is too small for Commitment price tier.
upvoted 3 times
...
Murtuza
1 year, 6 months ago
Based on this article it appears that " Commitment Tier " is considered best practices for Sentinel Logs https://charbelnemnom.com/top-best-practices-for-deploying-azure-sentinel/
upvoted 1 times
Ramye
1 year, 3 months ago
The better option is PAYG Documented here: https://azure.microsoft.com/en-ca/pricing/details/microsoft-sentinel/
upvoted 2 times
...
...
kabooze
1 year, 8 months ago
I find this a very odd question. Tier is out of the question. But why are people not considering the "daily cap". I know it's not something you would want to do practically, but a daily cap of 20 GB would limit the costs though...
upvoted 3 times
...
chepeerick
1 year, 8 months ago
Correct Option
upvoted 1 times
...
donathon
1 year, 10 months ago
Once Microsoft Sentinel is enabled on your Azure Monitor Log Analytics workspace, every GB of data ingested into the workspace, excluding Basic Logs, can be retained at no charge for the first 90 days. >> 90 days and PAYG because 20GB only which makes PAYG cheaper.
upvoted 1 times
...
liliap
2 years, 2 months ago
Answer is Correct 1. Commitment Tiers allow you to reserve a fixed amount of daily data ingestion capacity for Azure Monitor and Azure Sentinel for a fixed, predictable daily fee. 2. Data ingested into either classic or workspace-based Application Insights is retained for 90 days without any charge. Ref: https://azure.microsoft.com/en-us/pricing/details/monitor/
upvoted 4 times
User92
1 year, 11 months ago
True, given answer is correct. To minimize costs for daily ingested data and maximize the data retention period without incurring extra costs, you should use the Commitment Tiers for your Microsoft Sentinel workspace. Commitment Tiers provide discounted pricing based on a commitment to a specific amount of data ingestion per day, allowing you to optimize costs while maintaining the required data retention period.
upvoted 1 times
...
...
altecer
2 years, 4 months ago
On exam 2-11-2023
upvoted 6 times
...
herta
2 years, 4 months ago
by default retention is free up to 90 Days. Retention for Application Insights data types default to 90 days and will get the workspace retention if it is over 90 days
upvoted 3 times
...
saurabh123sml
2 years, 4 months ago
first should be PAYG
upvoted 4 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel