SC-100 Data Residency Practice Question
Your company is deploying Microsoft Sentinel in a government agency that requires strict data residency. You need to ensure that all Sentinel data is stored within the United States. Which THREE actions must you take to meet this requirement?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Disable cross-region replication in the Log Analytics workspace settings.
To ensure data residency within the United States, you must create the Log Analytics workspace in a US Azure region (Option B) and disable cross-region replication (Option A). Additionally, you should use Azure Policy to audit workspace region for compliance (Option E) to continuously monitor and enforce data residency requirements. Customer-managed keys (Option D) provide encryption control but are not strictly required for data residency. Data export to a different region (Option C) would violate residency.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Disable cross-region replication in the Log Analytics workspace settings.
Why this is correct
Correct. Disabling cross-region replication ensures data stays in the primary region, preventing replication to another region.
- ✓
Create the Log Analytics workspace in an Azure region in the United States (e.g., East US).
Why this is correct
Correct. Creating the workspace in a US region ensures the initial storage location is within the US.
- ✗
Configure data export to a storage account in a different region for redundancy.
Why it's wrong here
Incorrect. Exporting to a different region would move data outside the US, violating residency requirements.
- ✗
Enable customer-managed keys (CMK) using Azure Key Vault in the same region.
Why it's wrong here
Correct. Customer-managed keys are necessary for government compliance with data residency as they provide control over encryption keys.
- ✓
Use Azure Policy to audit workspace region for compliance.
Why this is correct
Incorrect. While Azure Policy can audit region compliance, it does not ensure data residency on its own; it is a monitoring tool, not an enforcement action for data storage location.
Go deeper
Related to this question
About these practice questions
This SC-100 question is part of Courseiva's 208-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-100 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-100 exam.