PCCSE · Question #252
Which command should be used in the Prisma Cloud twistcli tool to scan the nginx:latest image for vulnerabilities and compliance issues?
The correct answer is B. $ twistcli images scan. The twistcli tool uses the 'twistcli images scan' subcommand to scan container images for both vulnerabilities and compliance issues against a connected Prisma Cloud Console.
Question
Which command should be used in the Prisma Cloud twistcli tool to scan the nginx:latest image for vulnerabilities and compliance issues?
Options
- A$ twistcli images scan
- B$ twistcli images scan
- C$ twistcli images build
- D$ twistcli images scan
How the community answered
(33 responses)- A6% (2)
- B91% (30)
- C3% (1)
Why each option
The twistcli tool uses the 'twistcli images scan' subcommand to scan container images for both vulnerabilities and compliance issues against a connected Prisma Cloud Console.
This option uses an incorrect combination of flags or omits required parameters such as the Console address, making the scan command incomplete or invalid.
The correct twistcli subcommand for image scanning is 'twistcli images scan', which by default checks for both vulnerability and compliance findings and reports them back to the Prisma Cloud Console. The correct invocation includes the image name (e.g., nginx:latest) and connection flags such as --address and credentials, which distinguishes option B from the other variants with incorrect or missing flags.
'twistcli images build' is not a valid twistcli subcommand; twistcli does not have a build action for images.
This option contains incorrect flags or parameters that do not satisfy both vulnerability and compliance scanning requirements.
Concept tested: twistcli images scan command syntax
Source: https://docs.prismacloud.io/en/compute-edition/22-06/admin-guide/tools/twistcli-scan-images
Topics
Community Discussion
No community discussion yet for this question.