Palo Alto Networks Certified Cloud Security Engineer (PCCSE)Prisma Cloud PlatformHard
A global enterprise has deployed Prisma Cloud Enterprise and is concerned about the long-term storage and retrieval of compliance and audit data. Due to internal governance policies, all data must be retained for a minimum of seven years, well beyond Prisma Cloud's default retention periods. Which strategy should the enterprise employ to meet this requirement?
- AImplement regular data exports to an external, long-term storage solution.
- BDeploy a self-hosted Prisma Cloud Compute Edition to manage data locally.
- CIncrease the default data retention period in Prisma Cloud settings.
- DUtilize Prisma Cloud's built-in archiving feature for extended retention.
Show answer & explanationAnswer & explanation
Correct answer: A. Implement regular data exports to an external, long-term storage solution.
Prisma Cloud Enterprise (SaaS) has defined data retention policies that cannot be arbitrarily extended by customers to seven years. The most effective strategy for long-term retention beyond default periods is to regularly export data (e.g., via S3 or Azure Blob exports) to an external, customer-managed storage solution where it can be retained indefinitely according to internal policies.
Why the other options are wrong
- B. While self-hosted Compute allows local data management, it's primarily for container security and does not provide a comprehensive solution for enterprise-wide compliance and audit data retention for a SaaS Enterprise deployment's data.
- C. Prisma Cloud SaaS has fixed data retention periods that cannot be manually extended to seven years by customers.
- D. Prisma Cloud does not have a 'built-in archiving feature' that extends retention to seven years within the SaaS platform itself; exports are the mechanism for this.
Prisma Cloud Data Export for Long-Term Retention
The process of regularly exporting security and compliance data from Prisma Cloud to external customer-managed storage for retention periods exceeding Prisma Cloud's default SaaS policy.
- Enables compliance with stringent long-term data retention regulations.
- Typically uses cloud storage buckets (S3, Azure Blob) as export targets.
- Automated exports ensure continuous data capture for archival.
Memory trick: For data longer than 1 year, export it to your own archive.