Palo Alto Networks System Engineer – Prisma Cloud — Question 45

Which Resource Query Language (RQL) query returns a list of all TERMINATED Google Compute Engine (GCE) instances?

Answer options

• A. config from cloud.resource where api.name = 'gcloud-compute-instances-list' and json.rule = is TERMINATED
• B. config from cloud.resource where api.name = 'gcloud-compute-instances-list' = TERMINATED
• C. config from cloud.resource where api.name = 'gcloud-compute-instances-list* and json.rule = status TERMINATED
• D. config from cloud.resource where api.name = 'gcloud-compute-instances-list' and json.rule = contains TERMINATED status

Correct answer: A

Explanation

The correct answer, A, properly uses the syntax to filter instances where the status is specifically TERMINATED. Option B incorrectly uses '=' instead of the correct syntax, while option C contains a syntax error with the asterisk. Option D uses 'contains' incorrectly, as it does not match the exact status needed.