Palo Alto Networks Exam PCNSA Topic 2 Question 67 Discussion

Actual exam question for Palo Alto Networks's PCNSA exam

Question #: 67
Topic #: 2

[All PCNSA Questions]

Which two options does the firewall use to dynamically populate address group members? (Choose two.)

AIP Addresses

BTags

CMAC Addresses

DTag-based filters

Show Suggested Answer

Suggested Answer: B, D

A dynamic address group populates its members dynamically using look ups for tags and tag-based filters. Tags are metadata elements or attribute-value pairs that are registered for each IP address. Tag-based filters use logical and and or operators to match the tags and determine the membership of the dynamic address group. For example, you can create a dynamic address group that includes all IP addresses that have the tags ''web-server'' and ''linux''. You can also use static tags as part of the filter criteria.Reference:Policy Object: Address Groups,Use Dynamic Address Groups in Policy,Statics vs. Dynamic Address Objects Groups

by Charisse at Jul 02, 2024, 10:25 AM

Limited Time Offer

25%

Off

Get Premium PCNSA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Gail

6 months ago

Wait, is this a trick question? What if the answer is just A) IP Addresses? That would be a real firewall classic, don't you think?

upvoted 0 times

...

Hyman

6 months ago

A) and B) for sure. I mean, who uses MAC addresses these days? That's so 90s. Tags are where it's at!

upvoted 0 times

Dorcas

4 months ago

Definitely, using IP addresses and tags is the most efficient way to populate address group members.

upvoted 0 times

...

Launa

4 months ago

IP addresses and tags are more versatile and easier to work with.

upvoted 0 times

...

Donette

4 months ago

Yeah, MAC addresses seem outdated. Tags make it much easier to manage.

upvoted 0 times

...

Remona

5 months ago

I agree, IP addresses and tags are definitely the way to go.

upvoted 0 times

...

Katlyn

6 months ago

Dynamic, you say? In that case, I bet D) Tag-based filters is one of the options. Gotta keep up with the times, you know?

upvoted 0 times

Misty

5 months ago

Definitely, dynamic filtering is key in modern firewall systems.

upvoted 0 times

...

Stanton

5 months ago

I think you're right, D) Tag-based filters sounds like a good option too.

upvoted 0 times

...

Martina

5 months ago

A) IP Addresses and B) Tags

upvoted 0 times

...

Lyda

5 months ago

Definitely, dynamic filtering is key in modern firewall systems.

upvoted 0 times

...

Helaine

6 months ago

I think you're right, D) Tag-based filters sounds like a good option too.

upvoted 0 times

...

Jaleesa

6 months ago

A) IP Addresses and B) Tags

upvoted 0 times

...

Anglea

6 months ago

Hmm, I'm not so sure about C) MAC Addresses. Doesn't that seem a bit too static for a dynamic group? I'd go with A) and B).

upvoted 0 times

Alona

6 months ago

Yeah, I think C) MAC Addresses might be too static for a dynamic group.

upvoted 0 times

...

Magda

6 months ago

I agree, A) IP Addresses and B) Tags seem more dynamic.

upvoted 0 times

...

Latosha

6 months ago

I believe it's IP Addresses and Tags because they are commonly used for identifying and grouping network devices.

upvoted 0 times

...

Nicolette

6 months ago

I think it's definitely A) IP Addresses and B) Tags. Dynamic address groups are all about flexibility, and those two options seem to fit the bill.

upvoted 0 times

Margurite

5 months ago

Definitely, IP Addresses and Tags are the way to go for dynamic address group population.

upvoted 0 times

...

Shayne

6 months ago

IP Addresses and Tags make sense for dynamic population of address group members.

upvoted 0 times

...

Hassie

6 months ago

Yes, those two options provide the necessary flexibility for dynamic address groups.

upvoted 0 times

...

Pete

6 months ago

I agree, IP Addresses and Tags are the correct options for dynamically populating address group members.

upvoted 0 times

...

Cordie

6 months ago

I'm not sure about Tags. I think MAC Addresses could also be used by the firewall for dynamic population.

upvoted 0 times

...

Sabrina

7 months ago

I agree with Earleen. IP Addresses and Tags make sense for dynamically populating address group members.

upvoted 0 times

...

Earleen

7 months ago

I think the firewall uses IP Addresses and Tags to dynamically populate address group members.

upvoted 0 times

...