Exam CloudSec-Pro Topic 2 Question 56 Discussion

Actual exam question for Palo Alto Networks's CloudSec-Pro exam
Question #: 56
Topic #: 2

Which RQL query will help create a custom identity and access management (1AM) policy to alert on Lambda functions that have permission to terminate EC2 instances?

A. iam from cloud.resource where cloud.type equals 'AWS' AND cloud.resource.type equals 'lambda function' AND cloud.service.name = 'ec2' AND action.name equals 'ec2:TerminateInstances' B. config from iam where dest.cloud.type = 'AWS' AND source.cloud.service.name = 'ec2' AND source.cloud.resource.type = 'instance' AND dest.cloud.service.name = 'lambda' AND action.name = 'ec2:TerminateInstances' C. iam from cloud.resource where dest.cloud.type = 'AWS' AND source.cloud.service.name =
'lambda' AND source.cloud.resource.type = 'function' AND dest.cloud.service.name = 'ec2' AND action.name = 'ec2:TerminateInstances' D. config from iam where dest.cloud.type = 'AWS' AND source.cloud.service.name = 'lambda' AND source.cloud.resource.type = 'function' AND dest.cloud.service.name = 'ec2' AND action.name =
'ec2:TerminateInstances'

Comments

0 Happy Clients

0 Shares

0 Demo Downloads

10 Years in Business