Palo Alto Networks Exam PCNSA Topic 2 Question 60 Discussion

Actual exam question for Palo Alto Networks's Palo Alto Networks Certified Network Security Administrator exam

Question #: 60
Topic #: 2

[All Palo Alto Networks Certified Network Security Administrator Questions]

Which two options does the firewall use to dynamically populate address group members? (Choose two.)

AIP Addresses

BTags

CMAC Addresses

DTag-based filters

Show Suggested Answer

Suggested Answer: B, D

A dynamic address group populates its members dynamically using look ups for tags and tag-based filters. Tags are metadata elements or attribute-value pairs that are registered for each IP address. Tag-based filters use logical and and or operators to match the tags and determine the membership of the dynamic address group. For example, you can create a dynamic address group that includes all IP addresses that have the tags ''web-server'' and ''linux''. You can also use static tags as part of the filter criteria.Reference:Policy Object: Address Groups,Use Dynamic Address Groups in Policy,Statics vs. Dynamic Address Objects Groups

by Loren at Apr 08, 2024, 08:28 AM

Limited Time Offer

25%

Off

Get Premium PCNSA Questions as Interactive Web-Based Practice Test or PDF

Comments

Submit Cancel

Dottie

2 days ago

Hmm, this question seems a bit tricky. I'm not sure if I've seen anything about dynamic address groups in the material we've covered so far.

upvoted 0 times

...