Which "kind" of Kubernetes object that is configured to ensure that Defender is acting as the admission controller?

Which statement about build and run policies is true?

You are tasked with configuring a Prisma Cloud build policy for Terraform. What type of query is necessary to complete this policy?

The security team wants to target a CNAF policy for specific running Containers. How should the administrator scope the policy to target the Containers?

An administrator has deployed Console into a Kubernetes cluster running in AWS. The administrator also has configured a load balancer in TCP passthrough mode to listen on the same ports as the default Prisma Compute Console configuration.
In the build pipeline, the administrator wants twistcli to talk to Console over HTTPS. Which port will twistcli need to use to access the Prisma Compute APIs?