What are three valid information sources that can be used when tagging users to dynamic user groups? (Choose three.)

The correct answer is A. firewall logs B. custom API scripts C. Security Information and Event Management Systems (SIEMS), such as Splunk. https://docs.paloaltonetworks.com/best-practices/10-1/user-id-best-practices/user-id-best- practices/user-id-best-practices-for-dynamic-user-groups Identity the user information sources for the tags: For Authentication, Data, Threat, Traffic, Tunnel Inspection, URL, and WildFire

User Identification and Group-Based Policy

Question

Options

Afirewall logs
Bcustom API scripts
CSecurity Information and Event Management Systems (SIEMS), such as Splunk
Dbiometric scanning results from iOS devices
EDNS Security service

How the community answered

(47 responses)

A
79% (37)
D
9% (4)
E
13% (6)

Explanation

https://docs.paloaltonetworks.com/best-practices/10-1/user-id-best-practices/user-id-best- practices/user-id-best-practices-for-dynamic-user-groups Identity the user information sources for the tags: For Authentication, Data, Threat, Traffic, Tunnel Inspection, URL, and WildFire logs, create a log forwarding profile and use the Built-In Actions. For User-ID, HIP Match, GlobalProtect, and IP-Tag logs, configure the log settings. Security Information and Event Management Systems (SIEMS), such as Splunk Custom API scripts

Topics

#dynamic user groups#user tagging#User-ID#SIEM integration

Community Discussion

No community discussion yet for this question.

Full NETSEC-ANALYST Practice