Palo Alto Networks PCCSE Exam - Topic 3 Question 106 Discussion

Actual exam question for Palo Alto Networks's PCCSE exam

Question #: 106
Topic #: 3

Which type of RQL query should be run to determine if AWS Elastic Compute Cloud (EC2) instances without encryption was enabled?

ANETWORK

BEVENT

CCONFIG

DSECURITY

Show Suggested Answer

Suggested Answer: C

To determine if AWS EC2 instances are running without encryption enabled, the appropriate RQL (Resource Query Language) type to use is CONFIG. CONFIG queries in Prisma Cloud are designed to inspect the configuration states of cloud resources and identify compliance with best practices or specific security requirements. By running a CONFIG query, administrators can assess the configuration settings of EC2 instances, including whether encryption features are enabled or not. This type of query allows for deep inspection of resource configurations within cloud environments, making it the ideal choice for identifying unencrypted EC2 instances and thereby helping to ensure data protection and compliance with security policies.

by Rebbecca at Nov 19, 2025, 09:51 PM

Limited Time Offer

25%

Off

Get Premium PCCSE Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Alpha

1 day ago

Just checked, definitely CONFIG!

upvoted 0 times

...

Felicitas

6 days ago

Wait, are we sure about that? I thought it might be SECURITY.

upvoted 0 times

...

Izetta

12 days ago

Totally agree, CONFIG is the way to go!

upvoted 0 times

...

Alyce

17 days ago

C) CONFIG? More like C) COMMON SENSE, am I right? Encryption is a no-brainer these days.

upvoted 0 times

...

Tabetha

22 days ago

C) CONFIG is the way to go. Wouldn't want any unencrypted EC2 instances lurking around, that's just asking for trouble.

upvoted 0 times

...

Erasmo

27 days ago

Definitely C) CONFIG. Gotta love those configuration checks to keep our cloud infrastructure secure!

upvoted 0 times

...

Tonette

1 month ago

C) CONFIG is the correct answer. This type of RQL query would check the configuration of the EC2 instances to determine if encryption was enabled.

upvoted 0 times

...

Laurena

1 month ago

I’m leaning towards CONFIG too, but I wonder if NETWORK might have some insights on encryption settings.

upvoted 0 times

...

Flo

1 month ago

I practiced a similar question about EC2 instances, and I feel like SECURITY queries could be involved, but CONFIG seems more likely.

upvoted 0 times

...

Rene

2 months ago

I think the answer is C) CONFIG. That seems like the most logical choice to check the configuration settings of the EC2 instances for encryption.

upvoted 0 times

...

Charlette

2 months ago

I'm a bit confused on this one. Is it asking about the network, events, configuration, or security? I'll need to re-read the question and think it through step-by-step.

upvoted 0 times

...

Bo

2 months ago

Okay, let's see. We're looking for encryption settings on EC2 instances, so I'm guessing it's either C) CONFIG or D) SECURITY. I'll have to weigh the options and make my best educated guess.

upvoted 0 times

...

Mayra

2 months ago

I think the answer is C) CONFIG.

upvoted 0 times

...

Venita

2 months ago

I think we might need to look at the CONFIG queries since they deal with resource configurations, right?

upvoted 0 times

...

Kate

3 months ago

I'm not entirely sure, but I remember something about EVENT queries being used for tracking changes. Could that be relevant here?

upvoted 0 times

...

Audry

3 months ago

I'd go with C) CONFIG too. Encryption is a must-have these days, can't be leaving those EC2 instances exposed!

upvoted 0 times

...

Celeste

3 months ago

Hmm, I'm not sure about this one. I'll have to think it through carefully. Maybe I should review the RQL query types again to make sure I understand the differences.

upvoted 0 times

...

Margurite

3 months ago

I think the answer is C) CONFIG. That seems like the right type of query to check the configuration settings of the EC2 instances.

upvoted 0 times

Kirby

2 months ago

I agree, C) CONFIG makes sense for checking settings.

upvoted 0 times

...