Which firewall attribute can an engineer use to simplify rule creation and automatically adapt to changes in server roles or security posture based on log events?

The correct answer is A. Dynamic Address Groups. Dynamic Address Groups (DAGs) (A) are populated automatically using tags rather than static IP addresses. When a server's role or posture changes - for example, when a log event triggers an automatic tag via a Log Forwarding profile - the DAG membership updates in real time…

Configuring and Managing Security Policies

Question

Options

ADynamic Address Groups
BDynamic User Groups
CPredefined IP addresses
DAddress objects

How the community answered

(31 responses)

A
90% (28)
B
6% (2)
C
3% (1)

Explanation

Dynamic Address Groups (DAGs) (A) are populated automatically using tags rather than static IP addresses. When a server's role or posture changes - for example, when a log event triggers an automatic tag via a Log Forwarding profile - the DAG membership updates in real time without requiring a policy commit. This makes rules adaptive to infrastructure changes. Dynamic User Groups (B) are tag-based groups for users, not server roles. Predefined IP addresses (C) are static and do not adapt automatically. Address objects (D) are also static - they require manual updates when IP assignments change and do not respond to log events.

Topics

#Dynamic Address Groups#Automation#Policy Management#Adaptive Security

Community Discussion

No community discussion yet for this question.

Full NETSEC-GENERALIST Practice