nerdexam
Palo_Alto_Networks

PCNSE · Question #821

An administrator is creating a new Dynamic User Group to quarantine users for suspicious activity. Which two objects can Dynamic User Groups use as match conditions for group membership? (Choose two.)

The correct answer is B. Dynamic tags D. Ldap attributes. Dynamic tags: Dynamic User Groups can use dynamic tags as match conditions. These tags are assigned based on specific conditions, such as security events or alerts, and can dynamically adjust group membership based on user activity. This is a powerful feature for automatically…

Submitted by hans_de· Apr 18, 2026Deploy and Configure

Question

An administrator is creating a new Dynamic User Group to quarantine users for suspicious activity. Which two objects can Dynamic User Groups use as match conditions for group membership? (Choose two.)

Options

  • ASource IP address
  • BDynamic tags
  • CStatic tags
  • DLdap attributes

How the community answered

(49 responses)
  • A
    2% (1)
  • B
    94% (46)
  • C
    4% (2)

Explanation

Dynamic tags: Dynamic User Groups can use dynamic tags as match conditions. These tags are assigned based on specific conditions, such as security events or alerts, and can dynamically adjust group membership based on user activity. This is a powerful feature for automatically updating the group based on criteria like suspicious behavior or security incidents. LDAP attributes: Dynamic User Groups can also use LDAP attributes for membership criteria. These attributes come from the user’s directory information and can be used to group users based on properties such as user roles, departments, or security levels, providing flexibility in defining group membership.

Topics

#Dynamic User Groups#User-ID#Dynamic Tags#LDAP attributes

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice