Cyber Monday 2024! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25

- Free Preparation Discussions

Palo Alto Networks Exam PCCSE Topic 2 Question 80 Discussion

Actual exam question for Palo Alto Networks's PCCSE exam

Question #: 80
Topic #: 2

[All PCCSE Questions]

Which IAM RQL query would correctly generate an output to view users who enabled console access with both access keys and passwords?

Aconfig from network where api.name = 'aws-iam-get-credential-report' AND json.rule = cert_1_active is true or cert_2_active is true and password_enabled equals 'true'

Bconfig from cloud.resource where api.name = 'aws-iam-get-credential-report' AND json.rule = access_key_1_active is true or access_key_2_active is true and password_enabled equals 'true'

Cconfig from cloud.resource where api.name = 'aws-iam-get-credential-report' AND json.rule = access_key_1_active is false or access_key_2_active is true and password_enabled equals '*'

Dconfig where api.name = 'aws-iam-get-credential-report' AND json.rule= access_key_1_active is true or access_key_2_active is true and password_enabled equals ''true''

Show Suggested Answer

Suggested Answer: B

View users who enabled console access with both access keys and passwords: config from cloud.resource where api.name = 'aws-iam-get-credential-report' AND json.rule = access_key_1_active is true or access_key_2_active is true and password_enabled is true https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-rql-reference/rql-reference/config-query/config-query-examples

by Meaghan at Jul 03, 2024, 05:47 AM

Limited Time Offer

25%

Off

Get Premium PCCSE Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Simona

4 months ago

If you can't figure this out, you might as well just give up on your AWS certification. Option B is clearly the correct answer.

upvoted 0 times

...

Eva

4 months ago

Ha, option C is just silly. 'access_key_1_active is false' and 'password_enabled equals "*"'? That's not going to give us the right results.

upvoted 0 times

...

Celestina

4 months ago

I'm not sure, I think option A might also work. It's checking for the same conditions, just using a different syntax.

upvoted 0 times

Howard

4 months ago

I agree, both options could potentially work.

upvoted 0 times

...

Georgiann

4 months ago

Option A and B are similar, just different syntax.

upvoted 0 times

...

Jolanda

4 months ago

I'm not sure, option B seems more accurate to me.

upvoted 0 times

...

Joanna

4 months ago

I think option A is the correct one.

upvoted 0 times

...

...

Junita

5 months ago

I agree with Xochitl, option B seems to be the most accurate choice.

upvoted 0 times

...

Xochitl

5 months ago

But option D has a syntax error with the extra quotes around true.

upvoted 0 times

...

Cathrine

5 months ago

I agree, B is the right answer. The query checks the right conditions to find the users we need.

upvoted 0 times

Gennie

4 months ago

Agreed, B covers all the necessary conditions.

upvoted 0 times

...

Theodora

4 months ago

That makes sense, B seems to be the right choice.

upvoted 0 times

...

Lettie

5 months ago

Yes, B checks for both access keys and passwords being enabled.

upvoted 0 times

...

Deeann

5 months ago

I think the correct query is B.

upvoted 0 times

...

...

Alexis

5 months ago

Option B looks correct to me. It checks for users with both active access keys and enabled passwords, which is exactly what the question is asking for.

upvoted 0 times

Coletta

5 months ago

I agree, option B checks for users with both active access keys and enabled passwords.

upvoted 0 times

...

Johana

5 months ago

I think option B is the right one.

upvoted 0 times

...

...

Melodie

5 months ago

I disagree, I believe the answer is D.

upvoted 0 times

...

Xochitl

6 months ago

I think the correct answer is B.

upvoted 0 times

...

az-700 pass4success az-104 200-301 200-201 cissp 350-401 350-201 350-501 350-601 350-801 350-901 az-720 az-305 pl-300

Warning: Cannot modify header information - headers already sent by (output started at /pass.php:70) in /pass.php on line 77