Palo Alto Networks CloudSec-Pro Exam - Topic 5 Question 1 Discussion

Actual exam question for Palo Alto Networks's CloudSec-Pro exam

Question #: 1
Topic #: 5

Which IAM RQL query would correctly generate an output to view users who enabled console access with both access keys and passwords?

Aconfig from network where api.name = 'aws-iam-get-credential-report' AND json.rule = cert_1_active is true or cert_2_active is true and password_enabled equals 'true'

Bconfig from cloud.resource where api.name = 'aws-iam-get-credential-report' AND json.rule = access_key_1_active is true or access_key_2_active is true and password_enabled equals 'true'

Cconfig from cloud.resource where api.name = 'aws-iam-get-credential-report' AND json.rule = access_key_1_active is false or access_key_2_active is true and password_enabled equals '*'

Dconfig where api.name = 'aws-iam-get-credential-report' AND json.rule= access_key_1_active is true or access_key_2_active is true and password_enabled equals ''true''

Show Suggested Answer

Suggested Answer: B

View users who enabled console access with both access keys and passwords: config from cloud.resource where api.name = 'aws-iam-get-credential-report' AND json.rule = access_key_1_active is true or access_key_2_active is true and password_enabled is true https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-rql-reference/rql-reference/config-query/config-query-examples

by Mitsue at Mar 08, 2026, 01:09 AM

Limited Time Offer

25%

1 month ago

I remember we discussed the importance of checking both access keys and password status in our practice sessions.

upvoted 0 times

...