U.S. Independence Day Deal! Unlock 25% OFF Today – Limited-Time Offer - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Palo Alto Networks PSE-PrismaCloud Exam - Topic 3 Question 99 Discussion

Which RQL query should be used to quickly identify any events related to an organization's Google Cloud Platform Big Query database the last 24 hours?
C) event from cloud.audit_logs where cloud.type = 'gcp' AND cloud.service = 'bigquery.googleapis.com'
A) event from cloud.audit_logs where cloud.type = 'gcp' AND cloud.service = 'Google Bigtable Instance'
B) event from cloud.audit_logs where cloud.type = 'gcp' AND cloud.service = 'cloudsql.googleapis.com'
D) event from cloud.audit_logs where cloud.type = 'gcp' AND cloud.service = 'dataproc.googleapis.com'

Palo Alto Networks PSE-PrismaCloud Exam - Topic 3 Question 99 Discussion

Actual exam question for Palo Alto Networks's PSE-PrismaCloud exam
Question #: 99
Topic #: 3
[All PSE-PrismaCloud Questions]

Which RQL query should be used to quickly identify any events related to an organization's Google Cloud Platform Big Query database the last 24 hours?

Show Suggested Answer Hide Answer
Suggested Answer: C

by Theola at Nov 23, 2025, 10:01 PM

Limited Time Offer

25%

Off

Get Premium PSE-PrismaCloud Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Jerilyn
2 months ago
C is the best option. Clear and straightforward!
upvoted 0 times
...
Dahlia
2 months ago
Definitely C! It directly targets BigQuery logs.
upvoted 0 times
...
Francis
2 months ago
I was torn between C and A, but C is more relevant.
upvoted 0 times
...
Toi
2 months ago
I feel confident about C too. It's specific to BigQuery.
upvoted 0 times
...
Latonia
3 months ago
Agreed! C makes sense for BigQuery events.
upvoted 0 times
...
Royal
3 months ago
Totally agree with C, it's the most straightforward option!
upvoted 0 times
...
Ernie
3 months ago
Wait, are we sure about C? What if it changed recently?
upvoted 0 times
...
Cathrine
3 months ago
Definitely C, Big Query uses bigquery.googleapis.com.
upvoted 0 times
...
Dean
3 months ago
I think A is correct, isn't Bigtable part of GCP?
upvoted 0 times
...
Jeannine
4 months ago
BigQuery, of course! C) is the winner. Now, where's the nearest coffee shop?
upvoted 0 times
...
Julene
4 months ago
Hmm, I was going to go with B) but C) makes more sense. BigQuery is the way to go.
upvoted 0 times
...
France
4 months ago
C) BigQuery is the clear choice here. Glad I studied my GCP services!
upvoted 0 times
...
Dallas
4 months ago
C) Easy peasy. BigQuery is the way to go for this one.
upvoted 0 times
...
Crista
5 months ago
C) Definitely the correct answer. Gotta love that BigQuery!
upvoted 0 times
...
Nana
5 months ago
C) event from cloud.audit_logs where cloud.type = 'gcp' AND cloud.service = 'bigquery.googleapis.com'
upvoted 0 times
...
Rhea
5 months ago
I feel like I might be mixing up the services. Wasn't there something about Cloud SQL in one of the practice questions? But I think that's not related to BigQuery.
upvoted 0 times
...
Hyman
5 months ago
I practiced a similar question before, and I remember that BigQuery is usually referenced with 'bigquery.googleapis.com'. So, C seems correct.
upvoted 0 times
...
Mollie
5 months ago
I'm not entirely sure, but I remember something about cloud services needing the correct identifiers. Could it be A or C?
upvoted 0 times
...
Layla
6 months ago
I think the right answer might be C, since it specifically mentions BigQuery, which is what the question is asking about.
upvoted 0 times
...
Reena
6 months ago
Ah, I see what they're asking for now. We want to quickly identify any BigQuery-related events in the last 24 hours, so option C seems like the best fit. I'm feeling confident about this one.
upvoted 0 times
...
My
6 months ago
This is a good one. I think the key is to focus on the cloud.service field and make sure we're targeting BigQuery specifically. Option C looks like the right choice to me.
upvoted 0 times
...
Yong
6 months ago
I'm a bit confused here. Do we need to look for events related to other GCP services as well, or just BigQuery? I'm not sure if the other options might be relevant too.
upvoted 0 times
...
Ronnie
6 months ago
I think option C is the right choice. BigQuery is the focus.
upvoted 0 times
...
Keena
7 months ago
C is the right one for Big Query.
upvoted 0 times
...
Stefania
7 months ago
Okay, let me think this through. We need to look for events in the cloud.audit_logs where the cloud.type is 'gcp' and the cloud.service is related to BigQuery. I'm leaning towards option C, but I'll double-check the other options just to be sure.
upvoted 0 times
...
Jani
7 months ago
Hmm, this looks like a straightforward query to find BigQuery-related events in the last 24 hours. I think option C is the way to go.
upvoted 0 times
Francine
1 month ago
Good call! Let's go with option C.
upvoted 0 times
...
Jillian
2 months ago
I was thinking the same! C it is.
upvoted 0 times
...
Lakeesha
2 months ago
Definitely! BigQuery is the focus here.
upvoted 0 times
...
Gilberto
6 months ago
I agree, option C seems the most relevant.
upvoted 0 times
...
Nichelle
7 months ago
C is the right choice for sure.
upvoted 0 times
...
...

Save Cancel