Palo Alto Networks Certified Cloud Security Engineer (PCCSE)Prisma Cloud PlatformMedium
A security engineer is configuring data retention settings for Prisma Cloud Enterprise. The organization's compliance policy mandates that all audit trails and compliance scan results must be retained for a minimum of 7 years, while vulnerability scan data can be purged after 1 year. Which set of data retention configurations in Prisma Cloud would satisfy these requirements?
- AAudit Logs: 7 years, Compliance Scan Results: 7 years, Vulnerability Scan Data: 1 year
- BAudit Logs: 1 year, Compliance Scan Results: 7 years, Vulnerability Scan Data: 1 year
- CAudit Logs: 1 year, Compliance Scan Results: 1 year, Vulnerability Scan Data: 7 years
- DAudit Logs: 7 years, Compliance Scan Results: 1 year, Vulnerability Scan Data: 7 years
Show answer & explanationAnswer & explanation
Correct answer: A. Audit Logs: 7 years, Compliance Scan Results: 7 years, Vulnerability Scan Data: 1 year
The question specifies that audit trails and compliance scan results need a 7-year retention, and vulnerability scan data needs 1 year. Option B directly matches these requirements.
Why the other options are wrong
- B. Incorrectly assigns 1 year to Audit Logs.
- C. Incorrectly assigns 1 year to Audit Logs and Compliance Scan Results, and 7 years to Vulnerability Scan Data.
- D. Incorrectly assigns 1 year to Compliance Scan Results.
Prisma Cloud Data Retention
Prisma Cloud allows administrators to configure how long different types of security data (e.g., audit logs, scan results, alerts) are stored, typically to meet compliance or operational requirements.
- Configurable per data type.
- Important for compliance (e.g., GDPR, HIPAA).
- Impacts storage costs and performance.
Memory trick: Remember what data stays long and what can be forgotten quickly.