Which container image scan is constructed correctly?

The correct syntax for scanning a container image with twistcli requires specifying the Console's address for reporting results. The --address flag is used for this purpose, followed by the URL of the Prisma Cloud Console. The final argument is the name and tag of the image to be scanned. Option B correctly uses the --address flag with a valid URL format and the image identifier, representing the proper basic structure for an image scan command.

A. Anomaly: The --docker-address flag is used to specify the location of the Docker daemon socket, not the Prisma Cloud Console address.
C. Network: The --container flag is not a valid option for the twistcli images scan command. The image name is provided as a direct argument without a preceding flag.
D. Config: This option is incorrect for the same reason as C; it includes the invalid --container flag, which makes the command syntax invalid.

1. Palo Alto Networks, Prisma Cloud Administrator's Guide (Compute). "CI with twistcli." The documentation provides the syntax for scanning images: twistcli images scan --address --user [OPTIONS] . This confirms that --address is the correct flag for the Console URL and that the image is specified as a positional argument.

2. Palo Alto Networks, Prisma Cloud Administrator's Guide (Compute). "twistcli command reference." The reference guide for twistcli lists --address as the option to "Specify the address of the Console," and does not list a --container flag for the images scan subcommand.