What do Dynamic User Groups help you to do?

The correct answer is A. create a policy that provides auto-remediation for anomalous user behavior and malicious activity. Dynamic User Groups (DUGs) in PAN-OS allow security policies to reference groups whose membership is determined in real time by user tags - rather than static LDAP group membership. This enables automated remediation workflows: when a SIEM, SOAR, or script detects malicious or…

Submitted by yasin.bd· Apr 18, 2026Securing Traffic

Question

Options

Acreate a policy that provides auto-remediation for anomalous user behavior and malicious activity
Bcreate a dynamic list of firewall administrators
Ccreate a QoS policy that provides auto-remediation for anomalous user behavior and malicious
Dcreate a policy that provides auto-sizing for anomalous user behavior and malicious activity

How the community answered

(52 responses)

A
94% (49)
B
2% (1)
C
4% (2)

Explanation

Dynamic User Groups (DUGs) in PAN-OS allow security policies to reference groups whose membership is determined in real time by user tags - rather than static LDAP group membership. This enables automated remediation workflows: when a SIEM, SOAR, or script detects malicious or anomalous user behavior, it can apply a tag to that user via the PAN-OS API. The firewall instantly adds the user to the corresponding Dynamic User Group and enforces the associated restrictive policy, without requiring a manual configuration commit. This is distinct from QoS (C) or auto-sizing (D).

Topics

#Dynamic User Groups#Security Policy#User-ID#Automated Remediation

Community Discussion

No community discussion yet for this question.

Full PCNSA Practice