Palo Alto Networks System Engineer – Prisma Cloud — Question 57

Which Amazon Web Services (AWS) service supplies information for Prisma Cloud "event where" Resource Query Language (RQL) queries?

Answer options

• A. GuardDuty
• B. CloudTrail Audit Logs
• C. Activity Logs
• D. Inspector

Correct answer: B

Explanation

The correct answer is B, CloudTrail Audit Logs, as these logs contain detailed information about API calls made in your AWS account, which is crucial for RQL queries in Prisma Cloud. While GuardDuty (A) monitors for malicious activity, Activity Logs (C) and Inspector (D) do not specifically provide the necessary event data for RQL queries.