Which two resource types are included in the Prisma Cloud Enterprise licensing count? (Choose two.)

Question

Options

• AElastic Compute Cloud (EC2) instances
• BNetwork Address Translation (NAT) gateways
• CCloudFront distributions
• DSecurity groups

• A
  89% (39)
• B
  7% (3)
• D
  5% (2)

Explanation

Prisma Cloud Enterprise licenses are counted based on workloads (compute instances that run applications) and web-facing assets (resources that serve internet traffic). EC2 instances (A) are the core billable compute workload unit in AWS, and CloudFront distributions (C) are counted as internet-facing assets that deliver content - both are explicitly part of Prisma Cloud's resource-based licensing model.

NAT gateways (B) and security groups (D) are infrastructure/networking constructs rather than workloads or deployable assets, so they are excluded from the licensing count - Palo Alto does not charge for passive networking components or policy objects.

Memory tip: Think "things that run or serve" - EC2 runs your apps, CloudFront serves your users. If a resource just routes or controls traffic without being a billable workload itself (NAT gateways, security groups), it doesn't count toward the license.

No community discussion yet for this question.