Which three types of security checks can Prisma Public Cloud perform? (Choose three.)

Question

Options

• Acompliance where
• Bnetwork where
• Cuser where
• Dconfig where
• Eevent where

• A
  10% (4)
• B
  85% (35)
• C
  5% (2)

Explanation

Prisma Cloud's RQL (Resource Query Language) supports exactly three query types for security investigation: network where (B), config where (D), and event where (E). These correspond to the three pillars of cloud security visibility - network traffic analysis, resource configuration assessment, and audit event/log monitoring - and are the only valid RQL query prefixes the platform recognizes.

Why distractors are wrong:

• A. compliance where - Compliance is a reporting framework in Prisma Cloud, not a query type; you check compliance posture through config-based policies, not a separate "compliance" query.
• C. user where - There is no "user" query type; user activity is captured through event queries (e.g., CloudTrail logs), not a dedicated user prefix.

Memory tip: Think "NCE" - Network, Config, Event - the three lenses Prisma uses to see your cloud: how traffic flows, how resources are set up, and what actions were taken.

No community discussion yet for this question.