A global enterprise with diverse cloud environments and on-premises data centers wants to use Prisma Cloud for unified security posture management and workload protection. They have strict requirements for data sovereignty for certain workloads and need to run specific compliance checks locally within their on-premises environment without sending data to the public cloud. Which Prisma Cloud architecture component enables this capability?
- AThe Defender component deployed in the on-premises environment.
- BThe Prisma Cloud SaaS management plane.
- CCloud Connectors for each cloud provider.
- DThe Serverless Security module for FaaS protection.
Show answer & explanationAnswer & explanation
Correct answer: A. The Defender component deployed in the on-premises environment.
The Prisma Cloud Defender is a lightweight agent or container that can be deployed across various environments, including on-premises. It performs local scanning, monitoring, and enforcement, allowing data to remain within the local environment for sovereignty and enabling compliance checks without sending sensitive data to the public cloud management plane.
Why the other options are wrong
- B. The SaaS management plane is in the public cloud and would not keep data on-premises.
- C. Cloud Connectors are for ingesting metadata from public cloud accounts, not for on-premises workload protection or local data processing.
- D. Serverless Security modules are specific to FaaS (Function-as-a-Service) and do not address on-premises data center protection.
Prisma Cloud Defender
A lightweight, deployable component of Prisma Cloud that enforces security policies, scans for vulnerabilities, and monitors runtime behavior within hosts, containers, and serverless functions, capable of operating in various environments including on-premises.
- Deployed directly in the protected environment (host, container, serverless).
- Enables runtime protection and local scanning.
- Can operate with limited or no connectivity to the central console for air-gapped or data sovereignty needs.
Memory trick: To protect locally and keep data home, deploy the Defender as your guardian drone.