PCCSE · Question #255
How is the scope of each rule determined in the Prisma Cloud Compute host runtime policy?
The correct answer is B. By the collection assigned to that rule. In Prisma Cloud Compute, host runtime policy rules are scoped using collections, which define the set of hosts, containers, or images the rule applies to.
Question
How is the scope of each rule determined in the Prisma Cloud Compute host runtime policy?
Options
- ABy the order in which it is created
- BBy the collection assigned to that rule
- CBy the type of network traffic it controls
- DBy the target workload
How the community answered
(35 responses)- B91% (32)
- C3% (1)
- D6% (2)
Why each option
In Prisma Cloud Compute, host runtime policy rules are scoped using collections, which define the set of hosts, containers, or images the rule applies to.
Creation order determines rule precedence (first match wins), not the scope of which resources the rule applies to.
Collections are named groupings of resources (identified by host name, image name, namespace, cluster, etc.) that act as the scope selector for Compute policies including host runtime rules. When a rule is assigned a collection, it is enforced only on the resources that match that collection's criteria, allowing granular policy targeting across diverse environments.
Network traffic type is a characteristic used within firewall or WAAS rules, not the mechanism for scoping host runtime policy rules.
'Target workload' is not a Prisma Cloud configuration construct; collections - not a generic workload concept - are the explicit mechanism for defining rule scope.
Concept tested: Prisma Cloud Compute runtime policy scoping via collections
Source: https://docs.prismacloud.io/en/compute-edition/22-06/admin-guide/collections/collections
Topics
Community Discussion
No community discussion yet for this question.