nerdexam
Palo_Alto_Networks

NETSEC-ANALYST · Question #209

Which attribute can a dynamic address group use as a filtering condition to determine its membership?

The correct answer is A. tag. Dynamic Address Groups: A dynamic address group populates its members dynamically using looks ups for tags and tag-based filters. Dynamic address groups are very useful if you have an extensive virtual infrastructure where changes in virtual machine location/IP address are…

Policy and Object Management

Question

Which attribute can a dynamic address group use as a filtering condition to determine its membership?

Options

  • Atag
  • Bwildcard mask
  • CIP address
  • Dsubnet mask

How the community answered

(49 responses)
  • A
    76% (37)
  • B
    12% (6)
  • C
    8% (4)
  • D
    4% (2)

Explanation

Dynamic Address Groups: A dynamic address group populates its members dynamically using looks ups for tags and tag-based filters. Dynamic address groups are very useful if you have an extensive virtual infrastructure where changes in virtual machine location/IP address are frequent. For example, you have a sophisticated failover setup or provision new virtual machines frequently and would like to apply policy to traffic from or to the new machine without modifying the configuration/rules on the firewall. https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-web-interface-help/objects/objects-address-

Topics

#dynamic address groups#tags#address objects#policy objects

Community Discussion

No community discussion yet for this question.

Full NETSEC-ANALYST Practice