Prisma Cloud configuration policies are divided into "Build" and "Run" types. Build policies are a "shift-left" security control, scanning Infrastructure-as-Code (IaC) templates like Terraform or CloudFormation for misconfigurations before they are deployed. Run policies provide security posture management for deployed cloud resources by continuously monitoring them against security benchmarks and custom rules to identify active misconfigurations in the runtime environment.

A. Network policies are a distinct policy type for monitoring network traffic and are not part of the configuration policy set.

B. Audit Events policies are a separate policy type used for analyzing cloud audit logs (like CloudTrail) for suspicious user activity, not for resource configuration.

E. This statement describes the function of Network policies, which monitor network flows, not Run configuration policies, which assess resource settings.

1. Palo Alto Networks

"Prisma Cloud Administrator's Guide (SaaS)". Section: "Secure > Policies". This section outlines the different policy types

clearly distinguishing Configuration policies from Network and Audit Event policies.

2. Palo Alto Networks

"Prisma Cloud Administrator's Guide (SaaS)". Section: "Get Started with Policies > Policy Types > Configuration Policies". This documentation defines Build policies for IaC scanning and Run policies for monitoring deployed resources.