A large number of next-generation firewalls (NGFWs), along with Panorama and WildFire have been positioned for a prospective customer. The customer is concerned about storing retrieving and…

Question

Options

• ANGFWs that have at least 10TB of internal storage
• BAppropriately sized NGFW based on use of the POPSICLE tool
• CAppropriate Data Lake storage determined by using the Data Lake Calculator
• DA pair of fully populated M-300 storage appliances

• A
  4% (2)
• B
  13% (7)
• C
  78% (43)
• D
  5% (3)

Explanation

Palo Alto Networks' Cortex Data Lake is a cloud-based log storage service built specifically for enterprise-scale log ingestion, retention, and archival - and the Data Lake Calculator is the official sizing tool to determine the right capacity tier based on exact requirements like 10,000 logs/second and 60-day retention. This makes C the correct choice because it directly addresses both the throughput and the retention mandate through a purpose-built, scalable solution.

Why the others are wrong:

• A - NGFWs aren't log storage appliances; their internal storage is designed for operational use, not long-term archival at scale, and 10TB doesn't address the ingestion rate.
• B - POPSICLE is a Palo Alto tool for sizing NGFWs based on traffic performance, not for calculating log storage or retention capacity.
• D - M-300 appliances are Panorama management/log collectors, but a pair of fully populated M-300s is unlikely to sustain 10,000 logs/second at scale and isn't the recommended modern architecture for this use case - Cortex Data Lake supersedes on-prem log storage for large deployments.

Memory tip: When a question mentions log ingestion rate + retention days, think "Data Lake → Calculator" - the two always go together, just like the requirement pair (throughput + duration) in the question.

No community discussion yet for this question.