Palo Alto Networks Certified Security Automation Engineer (PCSAE)Cortex XSOAR FundamentalsHard
A security architect is designing a Cortex XSOAR deployment for an organization with stringent data residency requirements. The organization operates in multiple geographic regions, and data generated in one region must not leave that region. Which Cortex XSOAR deployment model best addresses this requirement while allowing centralized management?
- ASingle-tenant cloud deployment
- BMulti-tenant cloud deployment
- CDistributed on-premises deployment with multiple XSOAR servers
- DHybrid cloud deployment with a single XSOAR server
Show answer & explanationAnswer & explanation
Correct answer: C. Distributed on-premises deployment with multiple XSOAR servers
A distributed on-premises deployment with multiple XSOAR servers, each located within its respective geographic region, directly addresses stringent data residency requirements. While each server manages its local data, a centralized management approach can still be achieved through external orchestration or a managing XSOAR instance overseeing these regional deployments, adhering to data sovereignty laws.
Why the other options are wrong
- A. Single-tenant cloud might not guarantee region-specific data residency across multiple regions.
- B. Multi-tenant cloud typically pools resources and data, making strict regional data residency difficult to enforce.
- D. A single XSOAR server, even in a hybrid cloud, cannot meet multi-regional data residency requirements for all data.
Distributed On-premises XSOAR
A Cortex XSOAR deployment model featuring multiple XSOAR servers deployed locally across different geographic locations to meet specific data residency or compliance needs.
- Each server manages data for its local region.
- Addresses data residency and sovereignty laws.
- Offers localized performance and resilience.
- Can be centrally managed for a unified security posture.
Memory trick: Think 'local offices' for data, but a 'head office' for oversight.