What can be used to create dynamic address groups?

The correct answer is C. tags. Dynamic Address Groups (DAGs) use tags as their membership criteria. When an IP address or address object is assigned a tag (either statically via the GUI/CLI or dynamically via the XML API, User-ID, or VM monitoring), the firewall automatically includes it in any DAG…

Submitted by skyler.x· Apr 18, 2026Deploy and Configure

Question

Options

Adynamic address
Bregion objects
Ctags
DFODN addresses

How the community answered

(18 responses)

C
94% (17)
D
6% (1)

Explanation

Dynamic Address Groups (DAGs) use tags as their membership criteria. When an IP address or address object is assigned a tag (either statically via the GUI/CLI or dynamically via the XML API, User-ID, or VM monitoring), the firewall automatically includes it in any DAG configured to match that tag. This enables real-time, policy-driven group membership without manual updates. Region objects, FQDN addresses, and 'dynamic address' entries are not the mechanism for populating DAG membership - tags are the only supported criterion.

Topics

#Dynamic Address Groups#Tags#Security Policy

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice