Prisma Certified Cloud Security Engineer (PCCSE) — Question 133

When would a policy apply if the policy is set under Defend > Vulnerability > Images > Deployed?

Answer options

• A. when a serverless repository is scanned
• B. when a Container is started form an Image
• C. when the Image is built and when a Container is started form an Image
• D. when the Image is built

Correct answer: B

Explanation

The correct answer is B because the policy is applied when a Container is initiated from a deployed Image, which is the focus of this specific policy setting. Option A is incorrect as it refers to scanning a repository, not deploying an Image; option C incorrectly suggests that the policy also applies during the image construction phase, which it does not; and option D is also wrong as it only mentions the image building process.