Cloud-Security-Engineer Cloud Security Posture Management Practice Question
When creating a custom RQL query in Prisma Cloud, which THREE parameters or clauses are commonly utilized in a configuration resource query (`config from cloud.resource`)? (Choose three.)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
`cloud.type` to specify the cloud service provider (e.g., 'aws', 'azure', 'gcp').
Config RQL syntax uses clauses such as cloud.type, api.name, and filtering conditions to evaluate resource attributes.wan
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
`cloud.type` to specify the cloud service provider (e.g., 'aws', 'azure', 'gcp').
Why this is correct
The `cloud.type` parameter filters resources by cloud provider.
- ✓
`api.name` to target specific cloud resource types (e.g., 'aws-s3-bucket').
Why this is correct
The `api.name` parameter specifies the exact cloud resource API endpoint to query.
- ✗
`kernel.version` to check Linux kernel revisions on physical storage racks.
Why it's wrong here
RQL queries cloud resource metadata, not physical hardware kernel versions.
- ✓
`jmespath` to inspect nested JSON attributes within resource configuration structures.
Why this is correct
JMESPath expressions are used in RQL to query complex nested JSON properties.
- ✗
`http.method` to intercept incoming REST API payloads from client browsers.
Why it's wrong here
`http.method` is not part of Prisma Cloud RQL query syntax.
About these practice questions
Courseiva writes every Cloud-Security-Engineer question from scratch — 216 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official Palo Alto Networks exam blueprint
This Cloud-Security-Engineer practice question is part of Courseiva's free Palo Alto Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the Cloud-Security-Engineer exam.