Which two statements are true about the differences between build and run config policies? (Choose two.)

Which two statements are true about the differences between build and run config policies? (Choose two.)
A . Run and Network policies belong to the configuration policy set.
B . Build and Audit Events policies belong to the configuration policy set.
C . Run policies monitor resources, and check for potential issues after these cloud resources are deployed.
D . Build policies enable you to check for security misconfigurations in the IaC templates and ensure that these issues do not get into production.
E . Run policies monitor network activities in your environment, and check for potential issues during
runtime.

View Answer

Answer: CD

Explanation:

In the context of Prisma Cloud, Build and Run policies serve distinct purposes in securing cloud environments. Build policies are designed to evaluate Infrastructure as Code (IaC) templates before deployment. These policies help identify and remediate security misconfigurations in the development phase, ensuring that vulnerabilities are addressed before the infrastructure is provisioned. This proactive approach enhances security by preventing misconfigurations from reaching production environments.

On the other hand, Run policies are applied to resources that are already deployed in the cloud. These policies continuously monitor the cloud environment, detecting and alerting on potential security issues that arise in the runtime. Run policies help maintain the security posture of cloud resources by identifying deviations from established security baselines and enabling quick remediation of identified issues.

Both Build and Run policies are integral to a comprehensive cloud security strategy, addressing security concerns at different stages of the cloud resource lifecycle―from development and deployment to ongoing operation.