Palo Alto Networks Certified Security Automation Engineer (PCSAE)Cortex XSOAR FundamentalsEasy
An organization is deploying Cortex XSOAR and has strict compliance requirements that dictate all security event data must reside within their on-premises data centers. Which Cortex XSOAR deployment model is most suitable for this scenario?
- AManaged Service Provider (MSP)
- BSaaS (Software as a Service)
- CHybrid Cloud
- DOn-premises
Show answer & explanationAnswer & explanation
Correct answer: D. On-premises
An on-premises deployment allows the organization to host Cortex XSOAR entirely within their own data centers, ensuring full control over data residency and meeting strict compliance requirements for local data storage.
Why the other options are wrong
- A. MSP is a service model, not a deployment model; the MSP could deploy XSOAR on-premises or in the cloud.
- B. SaaS deployments host data in the vendor's cloud, which violates on-premises data residency requirements.
- C. Hybrid Cloud deployments involve a mix of on-premises and cloud, but the requirement for ALL data to be on-premises points away from any cloud component for data storage.
XSOAR On-premises Deployment
A deployment model where Cortex XSOAR software and all its components are installed and managed directly within the customer's own data center infrastructure.
- Provides full control over data residency and security.
- Requires customer to manage hardware, OS, and XSOAR updates.
- Ideal for organizations with strict compliance or data sovereignty requirements.
Memory trick: Where does your security data live: at home or in the cloud?