PCCSE · Question #139
Which RQL query type is invalid?
The correct answer is C. Incident. Prisma Cloud Resource Query Language (RQL) supports four valid query types: Config (for evaluating cloud resource configurations), Event (for analyzing audit logs and user/API activity), Network (for examining network traffic and connections), and IAM (for assessing identity…
Question
Which RQL query type is invalid?
Options
- AEvent
- BIAM
- CIncident
- DConfig
How the community answered
(35 responses)- A3% (1)
- B6% (2)
- C89% (31)
- D3% (1)
Explanation
Prisma Cloud Resource Query Language (RQL) supports four valid query types: Config (for evaluating cloud resource configurations), Event (for analyzing audit logs and user/API activity), Network (for examining network traffic and connections), and IAM (for assessing identity and access policies). 'Incident' is not a recognized RQL query type in Prisma Cloud. Incidents are generated by Prisma Cloud's anomaly detection engine as a higher-level concept, but they are not a standalone RQL query type that users can write queries against.
Topics
Community Discussion
No community discussion yet for this question.