Which method will dynamically register tags on the Palo Alto Networks NGFW?

The correct answer is D. XML-API or the VM Monitoring agent on the NGFW or on the User-ID agent. Palo Alto Networks uses its XML API (not a RESTful API) for programmatic dynamic address group tag registration. Tags can be registered dynamically via: (1) the XML API called directly against the NGFW or against the User-ID agent, and (2) the VM Monitoring agent (formerly…

Submitted by hassan_iq· Apr 18, 2026Deploy and Configure

Question

Options

ARestful API or the VMWare API on the firewall or on the User-ID agent or the read-only domain
BRestful API or the VMware API on the firewall or on the User-ID agent
CXML-API or the VMware API on the firewall or on the User-ID agent or the CLI
DXML-API or the VM Monitoring agent on the NGFW or on the User-ID agent

How the community answered

(22 responses)

A
5% (1)
B
5% (1)
D
91% (20)

Explanation

Palo Alto Networks uses its XML API (not a RESTful API) for programmatic dynamic address group tag registration. Tags can be registered dynamically via: (1) the XML API called directly against the NGFW or against the User-ID agent, and (2) the VM Monitoring agent (formerly called the VM Series plugin or VMware monitoring component), which automatically discovers and tags virtual machines in VMware/cloud environments. Options A and B incorrectly reference a 'RESTful API' - PAN-OS's primary programmatic interface for dynamic tag registration is the XML API. The CLI does not support pushing dynamic tag registrations in the same automated/programmatic way.

Topics

#Dynamic Tags#XML-API#VM Monitoring#User-ID Agent

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice