Palo Alto Networks Certified Cloud Security Engineer (PCCSE)Prisma Cloud PlatformMedium
A large organization is deploying Prisma Cloud Enterprise across multiple cloud providers (AWS, Azure, GCP) and requires a centralized management plane. Due to strict data residency requirements, all collected metadata and security findings must be processed and stored within a specific geographical region (e.g., EU-West-1). Which Prisma Cloud deployment option best addresses these requirements?
- ASaaS deployment with a global tenant.
- BSelf-hosted Enterprise Edition.
- CHybrid deployment integrating SaaS and self-hosted components.
- DSaaS deployment with a regional tenant.
Show answer & explanationAnswer & explanation
Correct answer: D. SaaS deployment with a regional tenant.
Prisma Cloud SaaS offers regional tenants which allow customers to choose a specific geographical region for their data to be processed and stored, satisfying data residency requirements while leveraging the benefits of a SaaS offering.
Why the other options are wrong
- A. A global SaaS tenant does not guarantee data residency to a specific region.
- B. Self-hosted Enterprise Edition would allow full control over data residency but comes with significant operational overhead, which SaaS aims to avoid.
- C. Hybrid deployments are for specific use cases (e.g., air-gapped environments) and don't inherently simplify regional data residency for a multi-cloud SaaS deployment.
Prisma Cloud Regional SaaS Tenant
A deployment option for Prisma Cloud SaaS where the customer's data and management plane are hosted within a specific geographic region to meet data residency and compliance requirements.
- Data processing and storage confined to selected region.
- Leverages Palo Alto Networks' managed infrastructure.
- Simplifies compliance with local regulations like GDPR.
Memory trick: Choosing your cloud home: SaaS is easy, but where does your data sleep?