Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Palo Alto Networks Exam PCNSA Topic 2 Question 67 Discussion

Actual exam question for Palo Alto Networks's Palo Alto Networks Certified Network Security Administrator exam
Question #: 67
Topic #: 2
[All Palo Alto Networks Certified Network Security Administrator Questions]

Which two options does the firewall use to dynamically populate address group members? (Choose two.)

Show Suggested Answer Hide Answer
Suggested Answer: B, D

A dynamic address group populates its members dynamically using look ups for tags and tag-based filters. Tags are metadata elements or attribute-value pairs that are registered for each IP address. Tag-based filters use logical and and or operators to match the tags and determine the membership of the dynamic address group. For example, you can create a dynamic address group that includes all IP addresses that have the tags ''web-server'' and ''linux''. You can also use static tags as part of the filter criteria.Reference:Policy Object: Address Groups,Use Dynamic Address Groups in Policy,Statics vs. Dynamic Address Objects Groups


Contribute your Thoughts:

Gail
24 days ago
Wait, is this a trick question? What if the answer is just A) IP Addresses? That would be a real firewall classic, don't you think?
upvoted 0 times
...
Hyman
25 days ago
A) and B) for sure. I mean, who uses MAC addresses these days? That's so 90s. Tags are where it's at!
upvoted 0 times
...
Katlyn
1 months ago
Dynamic, you say? In that case, I bet D) Tag-based filters is one of the options. Gotta keep up with the times, you know?
upvoted 0 times
Misty
21 hours ago
Definitely, dynamic filtering is key in modern firewall systems.
upvoted 0 times
...
Stanton
10 days ago
I think you're right, D) Tag-based filters sounds like a good option too.
upvoted 0 times
...
Martina
11 days ago
A) IP Addresses and B) Tags
upvoted 0 times
...
Lyda
19 days ago
Definitely, dynamic filtering is key in modern firewall systems.
upvoted 0 times
...
Helaine
23 days ago
I think you're right, D) Tag-based filters sounds like a good option too.
upvoted 0 times
...
Jaleesa
26 days ago
A) IP Addresses and B) Tags
upvoted 0 times
...
...
Anglea
1 months ago
Hmm, I'm not so sure about C) MAC Addresses. Doesn't that seem a bit too static for a dynamic group? I'd go with A) and B).
upvoted 0 times
Alona
22 days ago
User2: Yeah, I think C) MAC Addresses might be too static for a dynamic group.
upvoted 0 times
...
Magda
24 days ago
User1: I agree, A) IP Addresses and B) Tags seem more dynamic.
upvoted 0 times
...
...
Latosha
1 months ago
I believe it's IP Addresses and Tags because they are commonly used for identifying and grouping network devices.
upvoted 0 times
...
Nicolette
1 months ago
I think it's definitely A) IP Addresses and B) Tags. Dynamic address groups are all about flexibility, and those two options seem to fit the bill.
upvoted 0 times
Margurite
17 days ago
Definitely, IP Addresses and Tags are the way to go for dynamic address group population.
upvoted 0 times
...
Shayne
25 days ago
IP Addresses and Tags make sense for dynamic population of address group members.
upvoted 0 times
...
Hassie
28 days ago
Yes, those two options provide the necessary flexibility for dynamic address groups.
upvoted 0 times
...
Pete
1 months ago
I agree, IP Addresses and Tags are the correct options for dynamically populating address group members.
upvoted 0 times
...
...
Cordie
2 months ago
I'm not sure about Tags. I think MAC Addresses could also be used by the firewall for dynamic population.
upvoted 0 times
...
Sabrina
2 months ago
I agree with Earleen. IP Addresses and Tags make sense for dynamically populating address group members.
upvoted 0 times
...
Earleen
2 months ago
I think the firewall uses IP Addresses and Tags to dynamically populate address group members.
upvoted 0 times
...

Save Cancel