A financial institution uses Prisma Cloud to manage security and compliance across its multi-cloud environment. Due to regulatory requirements, they must retain all audit logs and security findings for a minimum of seven years. Given that Prisma Cloud SaaS typically has a default data retention period, what is the most cost-effective and compliant strategy for this long-term data retention?
- AManually download all logs and findings monthly and store them on on-premises archival storage.
- BUpgrade to a higher-tier Prisma Cloud license that offers extended retention.
- CRely solely on the default Prisma Cloud SaaS data retention policy.
- DConfigure Prisma Cloud to export all audit logs and findings to a long-term, cost-effective cloud storage solution (e.g., S3 Glacier, Azure Blob Archive).
Show answer & explanationAnswer & explanation
Correct answer: D. Configure Prisma Cloud to export all audit logs and findings to a long-term, cost-effective cloud storage solution (e.g., S3 Glacier, Azure Blob Archive).
While Prisma Cloud SaaS offers a default retention period, for extended, regulatory-driven retention (like seven years), the most cost-effective and scalable approach is to leverage Prisma Cloud's integration capabilities to export logs and findings to a dedicated, long-term cloud storage solution optimized for archival, such as AWS S3 Glacier or Azure Blob Archive storage tiers.
Why the other options are wrong
- A. Manual downloads are not automated, scalable, or reliable for continuous, long-term retention requirements of this magnitude.
- B. While some higher tiers might offer extended retention, it's often more cost-effective to use dedicated archival storage for very long periods, rather than paying for premium operational storage within the security platform itself.
- C. The default retention period is usually much shorter than seven years and would not meet the compliance requirement.
Prisma Cloud Data Export for Archival
The practice of configuring Prisma Cloud to automatically export audit logs, alerts, and security findings to external, long-term cloud storage services to meet extended data retention compliance requirements.
- Leverages cloud provider's archival storage tiers (e.g., S3 Glacier).
- Automated and cost-effective for large volumes of historical data.
- Ensures compliance with regulatory retention mandates.
Memory trick: For long-term data, export to the archival vault, don't just hope SaaS will hold it.