問題文
A company operates in two regions with data residency requirements that prevent logs from one region being stored in the other. They want a single security operations team to work across both. What is the appropriate design?
選択肢
- Create a workspace in each region and have analysts query across workspaces, accepting the added complexity of cross-workspace operations.
- Export all logs to storage accounts in each region and query them with an external tool.
- Create a workspace per data source type regardless of region.
- Create a single workspace in one region and route all logs to it, because cross-workspace queries are unavailable and the residency rule can be waived for security telemetry.