Prisma Certified Cloud Security Engineer (PCCSE) — Question 152

The security team wants to target a CNAF policy for specific running Containers.
How should the administrator scope the policy to target the Containers?

Answer options

• A. scope the policy to Image names.
• B. scope the policy to namespaces.
• C. scope the policy to Defender names.
• D. scope the policy to Host names.

Correct answer: A

Explanation

The correct answer is A because scoping the policy to Image names allows it to be applied directly to the specific Containers based on their images. Options B, C, and D do not effectively target the specific running Containers, as namespaces, Defender names, and Host names are broader categories that could include multiple Containers.