Exam PCCSE topic 1 question 115 discussion

E --> Check question 77

D You can choose one or both the policy subtypes options: Run subtype enables you to scan cloud resources that are already deployed on a supported cloud platform. Build subtype enables you to scan code repositories and IaC templates that are used to deploy cloud resources.

E --> The correct place to add the JSON query when creating a Config policy is in the "Build Your Rule (Build tab)" of the Config policy creation. In the Build Your Rule section, you can define the conditions and rules using JSON-based queries to specify the desired policy criteria. RQL type is run JSON query type is build --> The policies used for scanning IaC templates use a JSON query instead of RQL.

D The doc below shows: in Step 3 select Subtype Select Run or Build in Step 5 Under Run tab Build the query to define the match criteria for your policy. 2) Add a rule for the Build phase. *Build phase policies do not support remediation CLI; however add the instructions for manually fixing the issue. (https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-policies/create-a-policy)

E. Build Your Rule (Build tab)

C https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-policies/create-a-policy