Which two valid effects are used to deal with images within a rule for trusted images? (Choose two.)

Question

Options

• ADeny
• BAlert
• CBlock
• DIgnore

• A
  4% (3)
• B
  94% (63)
• D
  1% (1)

Explanation

In container security platforms like Prisma Cloud (Twistlock), trusted image rules support Alert and Block as valid effects. Alert (B) logs a policy violation and notifies administrators without stopping the image, while Block (C) actively prevents the untrusted image from running - together they cover the two practical enforcement responses available in this policy context.

Deny (A) is a distractor because the correct term in this framework is "Block" - "Deny" is used in other policy types (like network rules) but is not a valid effect for trusted image rules. Ignore (D) is not a recognized effect option in this rule type; the platform doesn't offer a formal "Ignore" action for handling images in trusted image policy rules.

Memory tip: Think "AB → Alert/Block" for trusted images - you either get notified (Alert) or the door slams shut (Block). If you see "Deny," think network rules, not image rules.

No community discussion yet for this question.