nerdexam
Palo_Alto_Networks

PCCSE · Question #139

Which RQL query type is invalid?

The correct answer is C. Incident. Prisma Cloud Resource Query Language (RQL) supports four valid query types: Config (for evaluating cloud resource configurations), Event (for analyzing audit logs and user/API activity), Network (for examining network traffic and connections), and IAM (for assessing identity…

Prisma Cloud Platform

Question

Which RQL query type is invalid?

Options

  • AEvent
  • BIAM
  • CIncident
  • DConfig

How the community answered

(35 responses)
  • A
    3% (1)
  • B
    6% (2)
  • C
    89% (31)
  • D
    3% (1)

Explanation

Prisma Cloud Resource Query Language (RQL) supports four valid query types: Config (for evaluating cloud resource configurations), Event (for analyzing audit logs and user/API activity), Network (for examining network traffic and connections), and IAM (for assessing identity and access policies). 'Incident' is not a recognized RQL query type in Prisma Cloud. Incidents are generated by Prisma Cloud's anomaly detection engine as a higher-level concept, but they are not a standalone RQL query type that users can write queries against.

Topics

#RQL#Prisma Cloud Query Language#Prisma Cloud Platform#Query Types

Community Discussion

No community discussion yet for this question.

Full PCCSE Practice