Palo Alto Networks Certified Cloud Security Engineer (PCCSE)Prisma Cloud PlatformMedium
A security architect is evaluating Prisma Cloud deployment options for a large enterprise with stringent data residency requirements. The enterprise operates exclusively within a single geographical region and requires all security data, including configuration, logs, and scan results, to remain within that region. Which deployment option is best suited for this requirement?
- APrisma Cloud Compute Edition
- BPrisma Cloud Self-Hosted
- CPrisma Cloud Regional SaaS Tenant
- DPrisma Cloud Enterprise (SaaS)
Show answer & explanationAnswer & explanation
Correct answer: B. Prisma Cloud Self-Hosted
Prisma Cloud Self-Hosted deployment allows the organization to control the entire infrastructure, ensuring all data resides within their chosen geographical region, which is crucial for stringent data residency requirements.
Why the other options are wrong
- A. Prisma Cloud Compute Edition is focused on container and host security and can be integrated with Enterprise, but doesn't define the overall data residency for the entire platform.
- C. Prisma Cloud Regional SaaS Tenant offers data residency within a specific region, but still relies on Palo Alto Networks' infrastructure and may not meet the most stringent 'customer-controlled' data residency needs.
- D. Prisma Cloud Enterprise (SaaS) is a multi-tenant environment where data may be distributed across Palo Alto Networks' global infrastructure.
Prisma Cloud Self-Hosted Deployment
An on-premises or customer-managed deployment of Prisma Cloud that provides full control over the platform's infrastructure and data locality.
- Customer manages all components (Console, Defenders, database).
- Offers maximum control over data residency.
- Requires significant operational overhead from the customer.
Memory trick: To keep data 'home', you need to 'host' it yourself.