nerdexam
Palo_Alto_Networks

PCCSE · Question #252

Which command should be used in the Prisma Cloud twistcli tool to scan the nginx:latest image for vulnerabilities and compliance issues?

The correct answer is B. $ twistcli images scan. The twistcli tool uses the 'twistcli images scan' subcommand to scan container images for both vulnerabilities and compliance issues against a connected Prisma Cloud Console.

Container Security

Question

Which command should be used in the Prisma Cloud twistcli tool to scan the nginx:latest image for vulnerabilities and compliance issues?

Options

  • A$ twistcli images scan
  • B$ twistcli images scan
  • C$ twistcli images build
  • D$ twistcli images scan

How the community answered

(33 responses)
  • A
    6% (2)
  • B
    91% (30)
  • C
    3% (1)

Why each option

The twistcli tool uses the 'twistcli images scan' subcommand to scan container images for both vulnerabilities and compliance issues against a connected Prisma Cloud Console.

A$ twistcli images scan

This option uses an incorrect combination of flags or omits required parameters such as the Console address, making the scan command incomplete or invalid.

B$ twistcli images scanCorrect

The correct twistcli subcommand for image scanning is 'twistcli images scan', which by default checks for both vulnerability and compliance findings and reports them back to the Prisma Cloud Console. The correct invocation includes the image name (e.g., nginx:latest) and connection flags such as --address and credentials, which distinguishes option B from the other variants with incorrect or missing flags.

C$ twistcli images build

'twistcli images build' is not a valid twistcli subcommand; twistcli does not have a build action for images.

D$ twistcli images scan

This option contains incorrect flags or parameters that do not satisfy both vulnerability and compliance scanning requirements.

Concept tested: twistcli images scan command syntax

Source: https://docs.prismacloud.io/en/compute-edition/22-06/admin-guide/tools/twistcli-scan-images

Topics

#twistcli#Image Scanning#Container Vulnerability Scanning#Compliance Scanning

Community Discussion

No community discussion yet for this question.

Full PCCSE Practice