An engineer is creating a security policy based on Dynamic User Groups (DUG) What benefit does this provide?

Question

Options

• AAutomatically include users as members without having to manually create and commit policy or
• BDUGs are used to only allow administrators access to the management interface on the Palo Alto
• CIt enables the functionality to decrypt traffic and scan for malicious behaviour for User-ID based
• DSchedule commits at a regular intervals to update the DUG with new users matching the tags

• A
  95% (19)
• B
  5% (1)

Explanation

Dynamic User Groups (DUGs) allow the firewall to automatically adjust group membership in real time based on registered IP tags or user attributes, without requiring a manual policy edit or commit. When a user matches the defined tag criteria, they are instantly included in the DUG and the associated security policy applies - eliminating the operational overhead of modifying and committing policy every time a user needs to be added or removed. This is especially valuable in dynamic environments (e.g., quarantine workflows, role-based access) where user attributes change frequently.

No community discussion yet for this question.