Which two statements explain differences between build and run config policies? (Choose two.)

The correct answer is B. Build policies allow checking for security misconfigurations in the IaC templates and ensure these D. Run policies monitor resources and check for potential issues after these cloud resources are. The key distinction between build and run config policies is when they operate in the resource lifecycle. Build policies (B) scan Infrastructure-as-Code (IaC) templates such as Terraform, CloudFormation, or ARM templates before deployment, catching misconfigurations at the…

Cloud Native Security

Question

Options

ARun and Network policies belong to the configuration policy set.
BBuild policies allow checking for security misconfigurations in the IaC templates and ensure these
CRun policies monitor network activities in the environment and check for potential issues during
DRun policies monitor resources and check for potential issues after these cloud resources are

How the community answered

(26 responses)

A
12% (3)
B
85% (22)
C
4% (1)

Explanation

The key distinction between build and run config policies is when they operate in the resource lifecycle. Build policies (B) scan Infrastructure-as-Code (IaC) templates such as Terraform, CloudFormation, or ARM templates before deployment, catching misconfigurations at the source before any cloud resource is provisioned. Run policies (D) continuously monitor live, already-deployed cloud resources and alert when their current configuration violates a policy rule. Answer A is incorrect because Network policies are a separate policy type from config policies, not a subset. Answer C is incorrect because monitoring network activities is the function of Network policies, not Run config policies.

Topics

#Build-time security#Run-time security#IaC security#Misconfiguration management

Community Discussion

No community discussion yet for this question.

Full PCCSE Practice