A security team needs to identify which data in Cortex contains personally identifiable information (PII) to apply stricter handling. What is the first step in this process?

Configure data residency settings

Classify the data based on its sensitivity and type

What is the main purpose of audit logging in a Cortex tenant for compliance purposes?

To determine the geographic storage location of data

To provide a record of activities for demonstrating compliance

To define how long data is retained

To restrict access to sensitive data

A company is required by GDPR to keep all personal data within the EU. The security architect is configuring Cortex XSIAM and needs to ensure that data is not stored outside the EU. What should the architect do?

Set up audit logging to monitor data transfers outside the EU.

Configure a data retention policy that deletes data after 30 days.

Select the EU region when creating the Cortex tenant.

Enable data encryption to prevent data from leaving the EU.

Why is it important to incorporate local privacy law variations into the Cortex tenant design?

To meet the specific regulatory requirements of each jurisdiction

To simplify the overall security architecture

To reduce the number of user roles needed

To ensure data is stored in the most cost-effective region

A retail company subject to PCI DSS must retain firewall logs for at least one year, but GDPR requires that personal data not be kept longer than necessary. The security architect needs to configure Cortex XSIAM data retention to satisfy both requirements. What is the most appropriate approach?

Disable retention policies and rely on manual deletion of logs after one year.

Set a single retention policy of one year for all data types in Cortex.

Configure separate retention policies: one year for firewall logs and a shorter period for other personal data.

Retain all data for one year and then archive it to a cold storage bucket for indefinite retention.

Palo Alto NetworksCertified Security Operations Architect

Domain 1Objective 1

1.1 Design Data Residency, Retention, and Access Control Models Within the Cortex Tenant to Meet Standards (e.g., GDPR, PCI, Local Privacy Laws) SECURITY-OPERATIONS-ARCHITECT Practice Questions (Page 6)

Part of the Business Alignment and Strategy domain, which accounts for 22% of the SECURITY-OPERATIONS-ARCHITECT exam.

30questions here

6free pages

7concepts

22%of the exam

Questions 26–30

26foundation · easy
A security team needs to identify which data in Cortex contains personally identifiable information (PII) to apply stricter handling. What is the first step in this process?
Select an answer first
27foundation · easy
What is the main purpose of audit logging in a Cortex tenant for compliance purposes?
Select an answer first
28application · easy
A company is required by GDPR to keep all personal data within the EU. The security architect is configuring Cortex XSIAM and needs to ensure that data is not stored outside the EU. What should the architect do?
Select an answer first
29foundation · easy
Why is it important to incorporate local privacy law variations into the Cortex tenant design?
Select an answer first
30application · medium
A retail company subject to PCI DSS must retain firewall logs for at least one year, but GDPR requires that personal data not be kept longer than necessary. The security architect needs to configure Cortex XSIAM data retention to satisfy both requirements. What is the most appropriate approach?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to SECURITY-OPERATIONS-ARCHITECT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “SECURITY-OPERATIONS-ARCHITECT” is a trademark of its owner, used for identification only.