nerdexam
Palo_Alto_Networks

PCNSA · Question #209

Which attribute can a dynamic address group use as a filtering condition to determine its membership?

The correct answer is A. tag. Dynamic Address Groups: A dynamic address group populates its members dynamically using looks ups for tags and tag-based filters. Dynamic address groups are very useful if you have an extensive virtual infrastructure where changes in virtual machine location/IP address are…

Submitted by ashley.k· Apr 18, 2026Managing Objects

Question

Which attribute can a dynamic address group use as a filtering condition to determine its membership?

Options

  • Atag
  • Bwildcard mask
  • CIP address
  • Dsubnet mask

How the community answered

(35 responses)
  • A
    89% (31)
  • B
    3% (1)
  • C
    6% (2)
  • D
    3% (1)

Explanation

Dynamic Address Groups: A dynamic address group populates its members dynamically using looks ups for tags and tag-based filters. Dynamic address groups are very useful if you have an extensive virtual infrastructure where changes in virtual machine location/IP address are frequent. For example, you have a sophisticated failover setup or provision new virtual machines frequently and would like to apply policy to traffic from or to the new machine without modifying the configuration/rules on the firewall. https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-web-interface-help/objects/objects-address-

Topics

#Dynamic Address Groups#Objects#Filtering#Tags

Community Discussion

No community discussion yet for this question.

Full PCNSA Practice