What is the correct method for ensuring key-sensitive data related to SSNs and credit card numbers cannot be viewed in Dashboard > Data view during investigations?

To prevent the viewing of sensitive data snippets like Social Security Numbers (SSNs) and credit card numbers during investigations, Prisma Cloud provides a specific data masking feature. The correct method is to navigate to Settings > Data > Snippet Masking and configure the masking level. Selecting Full Mask ensures that any sensitive data identified by data policies is completely redacted and not visible to any user in the Prisma Cloud console, thereby protecting data privacy while still allowing security teams to investigate the context of the alert.

B. Modifying data patterns changes the logic for detecting sensitive data, not the settings for displaying the detected data in the user interface.
C. Assigning account groups with limited permissions is for Role-Based Access Control (RBAC) and restricts access to resources, not the masking of data within alerts.
D. Modifying a data policy changes the conditions that trigger an alert, not how the details of that alert are presented in the dashboard.

1. Palo Alto Networks, Prisma Cloud Administrator's Guide. "Data Security." The section on "Configure Snippet Masking on Prisma Cloud" explicitly details this feature. It states, "To prevent accidental exposure of sensitive data, you can mask the snippets that are displayed on the Prisma Cloud administrative console... You can choose to display the full snippet, a partial snippet, or a fully masked snippet."

2. Palo Alto Networks, Prisma Cloud Docs. "Data Security Settings." This page provides the exact navigation path: Settings > Data > Snippet Masking, and describes the "Full Mask," "Partial Mask," and "No Mask" options.