Palo Alto Networks Certified Cloud Security Engineer (PCCSE)Prisma Cloud PlatformHard
A global financial institution is deploying Prisma Cloud Enterprise. Due to stringent regulatory requirements and a need for local data processing, they require separate, independent instances of Prisma Cloud within each major geographical region (e.g., North America, EMEA, APAC). Each regional team must manage its own policies, alerts, and user access without impacting other regions. Which Prisma Cloud architecture model best supports this requirement?
- AFederated Architecture
- BSingle Tenant On-Premises
- CCompute Module Integration
- DCentralized SaaS Deployment
Show answer & explanationAnswer & explanation
Correct answer: A. Federated Architecture
Federated Architecture allows for multiple independent Prisma Cloud tenants (often regional) that can be centrally managed at a high level while maintaining autonomy for local teams, perfectly addressing the need for separate management and data processing per region.
Why the other options are wrong
- B. Single Tenant On-Premises addresses data residency but doesn't inherently provide a 'federated' model across multiple distinct regions with independent management.
- C. Compute Module Integration refers to integrating the Compute Edition with Enterprise, not an overall architectural model for regional independence.
- D. A Centralized SaaS Deployment would consolidate all data and management, violating the 'separate, independent instances' requirement.
Prisma Cloud Federated Architecture
An architectural model where multiple independent Prisma Cloud tenants (child tenants) operate autonomously within specific regions or business units, often with an optional central (parent) tenant for global oversight.
- Enables regional autonomy for management and data.
- Supports regulatory compliance and data residency.
- Allows for global visibility if a parent tenant is configured.
Memory trick: Like a 'federation' of states, each is independent but can be united.