Free Preparation Discussions
MENU
Palo Alto Networks PSE-SWFW-Pro-24 Exam - Topic 2 Question 1 Discussion
Topic #: 2
What can a firewall use to automatically update Security policies with new IP address information for a virtual machine (VM) when it has moved from host-A to host-B because host-A is down or undergoing periodic maintenance?
When a virtual machine moves between hosts and its IP address changes (or if it's assigned a new IP from a pool), traditional static security policies become ineffective. Dynamic Address Groups solve this problem.
A . Dynamic Address Groups: These groups automatically update their membership based on criteria such as tags, VM names, or other dynamic attributes. When a VM moves and its IP address changes, the Dynamic Address Group automatically updates its membership, ensuring that security policies remain effective without manual intervention. This is the correct solution for this scenario.
B . Dynamic User Groups: These groups are based on user identity and are used for user-based policy enforcement, not for tracking IP addresses of VMs.
C . Dynamic Host Groups: This is not a standard Palo Alto Networks term.
D . Dynamic IP Groups: While the concept sounds similar, the official Palo Alto Networks terminology is 'Dynamic Address Groups.' They achieve the functionality described in the question.
Allene
10 months agoKristal
10 months agoFreeman
10 months agoCathrine
11 months agoAlysa
11 months agoJarod
11 months agoLeota
11 months agoVirgilio
11 months agoSteffanie
11 months agoRefugia
11 months agoHermila
11 months agoTy
12 months agoCammy
12 months agoNina
2 years agoDerick
2 years agoMiesha
2 years agoAndra
2 years agoMalcom
2 years agoStefanie
2 years agoPok
2 years agoNatalie
2 years agoAlberto
2 years agoFrederica
2 years agoMagdalene
2 years agoKiera
2 years agoMarguerita
2 years agoTawna
2 years agoDeangelo
2 years agoLajuana
2 years agoKristel
2 years agoRickie
2 years agoOctavio
2 years agoNickole
2 years ago