Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Palo Alto Networks CloudSec-Pro Exam - Topic 5 Question 1 Discussion

Which IAM RQL query would correctly generate an output to view users who enabled console access with both access keys and passwords?
B) config from cloud.resource where api.name = 'aws-iam-get-credential-report' AND json.rule = access_key_1_active is true or access_key_2_active is true and password_enabled equals 'true'
A) config from network where api.name = 'aws-iam-get-credential-report' AND json.rule = cert_1_active is true or cert_2_active is true and password_enabled equals 'true'
C) config from cloud.resource where api.name = 'aws-iam-get-credential-report' AND json.rule = access_key_1_active is false or access_key_2_active is true and password_enabled equals '*'
D) config where api.name = 'aws-iam-get-credential-report' AND json.rule= access_key_1_active is true or access_key_2_active is true and password_enabled equals ''true''

Palo Alto Networks CloudSec-Pro Exam - Topic 5 Question 1 Discussion

Actual exam question for Palo Alto Networks's CloudSec-Pro exam
Question #: 1
Topic #: 5
[All CloudSec-Pro Questions]

Which IAM RQL query would correctly generate an output to view users who enabled console access with both access keys and passwords?

Show Suggested Answer Hide Answer
Suggested Answer: B

View users who enabled console access with both access keys and passwords: config from cloud.resource where api.name = 'aws-iam-get-credential-report' AND json.rule = access_key_1_active is true or access_key_2_active is true and password_enabled is true https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-rql-reference/rql-reference/config-query/config-query-examples


by Mitsue at Mar 08, 2026, 01:09 AM

Limited Time Offer

25%

Off

Get Premium CloudSec-Pro Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Audra
2 days ago
I agree, B makes sense. It covers all bases for console access.
upvoted 0 times
...
Paulina
7 days ago
I think option B is the best. It checks both access keys and passwords.
upvoted 0 times
...
Aaron
12 days ago
I can't believe how tricky this question is!
upvoted 0 times
...
Galen
17 days ago
A looks interesting too, but not sure if it’s correct.
upvoted 0 times
...
Rebeca
2 months ago
Wait, why is D using double quotes? Seems off.
upvoted 0 times
...
Skye
2 months ago
Definitely agree, B makes the most sense!
upvoted 0 times
...
Glynda
2 months ago
I think option B is the right one.
upvoted 0 times
...
Omer
3 months ago
Not sure about these queries, they seem off.
upvoted 0 times
...
Bettina
3 months ago
I agree with B, seems most accurate.
upvoted 0 times
...
Stephen
3 months ago
Wait, why is C even an option?
upvoted 0 times
...
Malcom
3 months ago
I think D is the right choice.
upvoted 0 times
...
Kina
3 months ago
Option B looks correct to me.
upvoted 0 times
...
Ashton
3 months ago
I think option D might be the right choice, but I’m a bit confused about the use of quotes in the condition.
upvoted 0 times
...
Milly
4 months ago
I feel like I saw a similar question where we had to check for active credentials, but I can't recall the exact syntax.
upvoted 0 times
...
Val
4 months ago
I'm not entirely sure, but I think option B sounds familiar since it mentions both access keys and passwords.
upvoted 0 times
...
Carrol
4 months ago
I remember we discussed the importance of checking both access keys and password status in our practice sessions.
upvoted 0 times
...

Save Cancel