You have onboarded a public cloud account into Prisma Cloud Enterprise. Configuration Resource ingestion is visible in the Asset Inventory for the onboarded account, but no alerts are being generated for the configuration assets in the account.
Config policies are enabled in the Prisma Cloud Enterprise tenant, with those policies associated to existing alert rules. ROL statements on the investigate matching those policies return config resource results successfully.
Why are no alerts being generated?

The security auditors need to ensure that given compliance checks are being run on the host. Which option is a valid host compliance policy?

Which three types of bucket exposure are available in the Data Security module? (Choose three.)

A customer has a large environment that needs to upgrade Console without upgrading all Defenders at one time.
What are two prerequisites prior to performing a rolling upgrade of Defenders? (Choose two.)

Which type of compliance check is available for rules under Defend > Compliance > Containers and Images
> CI?