nerdexam
Palo_Alto_Networks

PCCSE · Question #205

Which field is required during the creation of a custom config query?

The correct answer is B. api.name. Prisma Cloud's Resource Query Language (RQL) Config queries use the syntax: config from cloud.resource where api.name = '<API>' AND .... The api.name attribute is mandatory because it tells the platform which cloud provider API to interrogate (e.g., aws-ec2-describe-instances). W

Prisma Cloud Platform

Question

Which field is required during the creation of a custom config query?

Options

  • Aresource status
  • Bapi.name
  • Cfinding.type
  • Dcloud.type

How the community answered

(25 responses)
  • B
    88% (22)
  • C
    4% (1)
  • D
    8% (2)

Explanation

Prisma Cloud's Resource Query Language (RQL) Config queries use the syntax: config from cloud.resource where api.name = '<API>' AND .... The api.name attribute is mandatory because it tells the platform which cloud provider API to interrogate (e.g., aws-ec2-describe-instances). Without specifying api.name, the query engine has no source resource type to enumerate. Fields like cloud.type, resource.status, and finding.type are optional filters or belong to other query types (event, network), not required in every config query.

Topics

#Prisma Cloud#RQL#Custom Policies#Configuration Security

Community Discussion

No community discussion yet for this question.

Full PCCSE Practice