Which IAM RQL query would correctly generate an output to view users who enabled console access with both access keys and passwords?

The correct answer is B. config from cloud.resource where api.name = 'azure-active-directory-authorization-policy' AND. Prisma Cloud RQL (Resource Query Language) for cloud resource configuration queries uses the syntax: 'config from cloud.resource where api.name = ...' - not 'config where' alone (missing the source clause) and not 'config from network where' (which is for network-based…

Cloud Infrastructure Entitlement Management (CIEM)

Question

Options

Aconfig where api.name = 'azure-active-directory-authorization-policy' AND json.rule =
Bconfig from cloud.resource where api.name = 'azure-active-directory-authorization-policy' AND
Cconfig from network where api.name = 'azure-active-directory-authorization-policy' AND json.rule
Dconfig from cloud.resource where api.name = 'azure-active-directory-authorization-policy' AND

How the community answered

(45 responses)

A
4% (2)
B
71% (32)
C
16% (7)
D
9% (4)

Explanation

Prisma Cloud RQL (Resource Query Language) for cloud resource configuration queries uses the syntax: 'config from cloud.resource where api.name = ...' - not 'config where' alone (missing the source clause) and not 'config from network where' (which is for network-based queries). Option B uses the correct full syntax 'config from cloud.resource where api.name = ...' along with a json.rule filter. Options A and C use incorrect or incomplete syntax that would fail to execute properly.

Topics

#RQL#IAM Security#Prisma Cloud#Azure AD

Community Discussion

No community discussion yet for this question.

Full PCCSE Practice