Which two valid effects are used to deal with images within a rule for trusted images? (Choose two.)

In Prisma Cloud Compute, Trusted Images policies are used to define a list of approved images that are allowed to run. For any image that does not meet the trusted criteria, the policy rule's "effect" determines the enforcement action. The two valid effects for this type of rule are 'Alert', which generates an audit event and alert, and 'Block', which actively prevents the container from running.

A. Deny: 'Deny' is not a term used for the effect in Prisma Cloud image policies; the correct term for preventing execution is 'Block'.
D. Ignore: 'Ignore' is an action used to suppress specific findings within a scan (e.g., a CVE), not an enforcement effect for an entire image policy.

Palo Alto Networks, Prisma Cloud Compute Administrator's Guide, "Trusted images". The documentation on creating a trusted images rule specifies the available actions: "In Effect, specify the action to take when an untrusted image is run. Your choices are Alert or Block."