Which firewall attribute can an engineer use to simplify rule creation and automatically adapt to changes in server roles or security posture based on log events?

The correct answer is B. Dynamic Address Groups. Dynamic Address Groups enable the firewall to automatically adjust security policies based on tags assigned dynamically (via log events, API, etc.). This eliminates the need for manual updates to policies when server roles or IPs change. Dynamic Address Groups allow you to create

Network Security Policy Management

Question

Options

AAddress objects
BDynamic Address Groups
CDynamic User Groups
DPredefined IP addresses

How the community answered

(19 responses)

A
5% (1)
B
74% (14)
C
16% (3)
D
5% (1)

Explanation

Dynamic Address Groups enable the firewall to automatically adjust security policies based on tags assigned dynamically (via log events, API, etc.). This eliminates the need for manual updates to policies when server roles or IPs change. Dynamic Address Groups allow you to create policies that automatically adapt to changes in the environment. These groups are populated dynamically based on tags, enabling automated security policy updates without manual intervention.

Topics

#Dynamic Address Groups#policy automation#log-based updates#firewall rules

Community Discussion

No community discussion yet for this question.

Full NETSEC-PRO Practice