nerdexam
Palo_Alto_Networks

PCNSA · Question #431

Which two options does the firewall use to dynamically populate address group members? (Choose two.)

The correct answer is B. Tags D. Tag-based filters. A dynamic address group populates its members dynamically using look ups for tags and tag- based filters. Tags are metadata elements or attribute-value pairs that are registered for each IP address. Tag-based filters use logical and and or operators to match the tags and…

Submitted by tarun92· Apr 18, 2026Managing Objects

Question

Which two options does the firewall use to dynamically populate address group members? (Choose two.)

Options

  • AIP Addresses
  • BTags
  • CMAC Addresses
  • DTag-based filters

How the community answered

(38 responses)
  • A
    5% (2)
  • B
    89% (34)
  • C
    5% (2)

Explanation

A dynamic address group populates its members dynamically using look ups for tags and tag- based filters. Tags are metadata elements or attribute-value pairs that are registered for each IP address. Tag-based filters use logical and and or operators to match the tags and determine the membership of the dynamic address group. For example, you can create a dynamic address group that includes all IP addresses that have the tags "web-server" and "linux". You can also use static tags as part of the filter criteria.

Topics

#Dynamic Address Groups#Tags#Address Objects#Policy Objects

Community Discussion

No community discussion yet for this question.

Full PCNSA Practice