When the Cortex Data Lake is sized for Prisma Access mobile users, what is a valid log size range you would use per day. per user?

Question

Options

• A1500 to 2500 bytes
• B10 MB to 30 MB
• C1 MB to 5 MB
• D100 MB to 200 MB

• A
  6% (3)
• B
  2% (1)
• C
  8% (4)
• D
  83% (40)

Explanation

Palo Alto Networks' official sizing guidance for Cortex Data Lake specifies 100 MB to 200 MB of log storage per mobile user per day when planning a Prisma Access deployment. This range reflects the volume of logs generated across all security subscriptions - traffic, threat, URL filtering, authentication, and more - for a user whose entire internet-bound and corporate traffic flows through Prisma Access tunnels each day.

Option A (1500 to 2500 bytes) is far too small to represent even a handful of individual log entries, let alone a full day of activity. Option B (10 MB to 30 MB) and Option C (1 MB to 5 MB) both underestimate the logging volume significantly; these ranges might seem plausible for a lightly used session but do not reflect all-day, all-traffic inspection across multiple log types. Only Option D accounts for the full breadth of security telemetry that Cortex Data Lake must store per user.

Memory tip: Think of it as "a hundred to two hundred megabytes - about the size of a small photo library - for each mobile user each day." Anchoring to that real-world file-size comparison helps distinguish D from the distractors, which are all at least an order of magnitude too low.

No community discussion yet for this question.