What is the correct method for ensuring key-sensitive data related to SSNs and credit card numbers cannot be viewed in Dashboard > Data view during…

Prisma Cloud includes a specific data governance feature to prevent the exposure of sensitive data within its own user interface. The "Snippet Masking" setting directly controls whether the actual sensitive data discovered by data security policies is visible to investigators. By navigating to Settings > Data > Snippet Masking and selecting "Full Mask," an administrator ensures that sensitive strings like Social Security Numbers and credit card numbers are completely redacted in the Data view, protecting privacy during security reviews.

B. Modifying data patterns affects the detection logic for identifying sensitive data, not the visibility of the findings in the dashboard.

C. Assigning account groups is a role-based access control (RBAC) function to limit which accounts a user can see, not to mask data within those accounts.

D. Modifying a data policy changes the conditions under which an alert is generated, not how the discovered sensitive data is displayed.

1. Palo Alto Networks. (2023). Prisma Cloud Administrator's Guide. "Data Security Settings". This section describes the Snippet Masking feature: "To prevent sensitive data discovered on your resources from being displayed on the Prisma Cloud console

you can enable snippet masking... Full Mask—Masks the entire snippet."