Which two attributes of policies can be fetched using API? (Choose two.)

The Prisma Cloud API provides extensive endpoints for managing policies programmatically. When you retrieve a policy object using a GET request, the response body includes numerous attributes of the policy definition. Among these are labels, which are user-defined tags for organization and filtering, and policyMode, which specifies the policy's enforcement action (e.g., 'alert', 'prevent'). These attributes are fundamental to defining and managing a policy's behavior and can be fetched and modified via the API.

B. policy signature: This term is not a standard attribute of a Prisma Cloud policy object. It is more relevant to threat intelligence or IDS/IPS rule definitions.
D. policy violation: A violation is an event or alert generated when a policy's conditions are met. It is a result of the policy, not an attribute of the policy definition itself.

1. Palo Alto Networks, Prisma Cloud API Reference. "Get Policy". The documentation for the GET /policy/{id} endpoint shows the JSON response structure, which includes fields such as policyMode and labels.

2. Palo Alto Networks, Prisma Cloud API Reference. "Update Policy". The documentation for the PUT /policy/{id} endpoint shows that policyMode and labels are part of the request body, confirming they are manageable attributes of the policy object.