Which two statements are true about the differences between build and run config policies? (Choose two.)

Question

Options

• ABuild and Audit Events policies belong to the configuration policy set
• BRun policies monitor resources, and check for potential issues after these cloud resources are
• CRun policies monitor network activities in your environment, and check for potential issues during
• DBuild policies enable you to check for security misconfigurations in the laC templates and ensure
• ERun and Network policies belong to the configuration policy set

• A
  4% (1)
• B
  92% (22)
• E
  4% (1)

Explanation

Statement B is correct: Run policies monitor deployed cloud resources and check for potential issues after those resources are provisioned (post-deployment). Statement D is correct: Build policies allow you to check for security misconfigurations in IaC (Infrastructure as Code) templates before deployment, enforcing security during the build/development phase. Statement A is false - Audit Events policies are a separate policy type, not part of the config policy set. Statement C is false - network activity monitoring is the role of Network policies, not Run config policies. Statement E is false - Network policies are their own separate policy type.

No community discussion yet for this question.