Updates to dynamic user group membership are automatic therefore using dynamic user groups instead of static group objects allows you to:

The correct answer is B. respond to changes in user behaviour or potential threats without manual policy changes. Dynamic user groups help you to create policy that provides auto-remediation for anomalous user behavior and malicious activity while maintaining user visibility. After you create the group and commit the changes, the firewall registers the users and associated tags then…

Submitted by zhang_li· Apr 18, 2026Operate

Question

Options

Arespond to changes in user behaviour or potential threats using manual policy changes
Brespond to changes in user behaviour or potential threats without manual policy changes
Crespond to changes in user behaviour or potential threats without automatic policy changes
Drespond to changes in user behaviour and confirmed threats with manual policy changes

How the community answered

(54 responses)

B
94% (51)
C
2% (1)
D
4% (2)

Explanation

Dynamic user groups help you to create policy that provides auto-remediation for anomalous user behavior and malicious activity while maintaining user visibility. After you create the group and commit the changes, the firewall registers the users and associated tags then automatically updates the dynamic user group's membership. Because updates to dynamic user group membership are automatic, using dynamic user groups instead of static group objects allows you to respond to changes in user behavior or potential threats without manual policy changes. https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/policy/use-dynamic-user-groups-in-

Topics

#Dynamic User Groups#Policy Automation#User-ID

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice