A customer CSO has asked you to demonstrate how to identify all "Amazon RDS" resources deployed and the region that they are deployed in. What are two ways that Prisma Public Cloud can show the…

Question

Options

• AGenerate a compliance report from the Compliance dashboard
• BWrite an RQL query from the "Investigate" tab.
• CConfigure an Inventory report from the "Alerts" tab
• DOpen the Asset dashboard, filter on Amazon Web Services, and click "Amazon RDS" resources.

• A
  6% (3)
• B
  89% (42)
• C
  4% (2)

Explanation

Options B and D are correct because Prisma Cloud provides two direct paths to inventory cloud resources by type and region. The Investigate tab supports RQL (Resource Query Language) queries - for example, config where cloud.type = 'aws' AND api.name = 'aws-rds-describe-db-instances' - which returns all RDS instances along with their region metadata. The Asset dashboard (Asset Inventory) lets you filter by cloud provider (AWS) and click into a specific resource type like "Amazon RDS" to see all deployed instances and their regions in a visual, filterable table.

Option A is wrong because Compliance reports evaluate resources against security frameworks (CIS, NIST, PCI-DSS, etc.) - they show pass/fail posture, not a plain inventory of where resources are deployed. Option C is wrong because the Alerts tab surfaces security violations and misconfigurations, not inventory reports; there is no "Inventory report" option within Alerts.

Memory tip: Think "I-A" - Investigate (RQL) and Assets (dashboard) are your two inventory tools in Prisma Cloud. Compliance = policy posture; Alerts = violations - neither is designed for "show me what's deployed where."

No community discussion yet for this question.