How can a firewall be set up to automatically block users as soon as they are found to exhibit malicious behavior via a threat log?

The correct answer is B. Configure a dynamic user group for the users to be blocked with the tag "malicious." Add a Log. To block users dynamically based on threat log activity, dynamic user groups (DUGs) with tagging provide an automated solution. Option B configures a DUG with a "malicious" tag, a Log Forwarding profile to tag users in the threat log (e.g., via threat intelligence), and a…

Submitted by rachelw· Apr 18, 2026Deploy and Configure

Question

Options

AConfigure a dynamic address group for the addresses to be blocked with the tag "malicious." Add
BConfigure a dynamic user group for the users to be blocked with the tag "malicious." Add a Log
CConfigure the appropriate security profiles for Antivirus, Anti-Spyware, and Vulnerability

How the community answered

(30 responses)

A
10% (3)
B
83% (25)
C
7% (2)

Explanation

To block users dynamically based on threat log activity, dynamic user groups (DUGs) with tagging provide an automated solution. Option B configures a DUG with a "malicious" tag, a Log Forwarding profile to tag users in the threat log (e.g., via threat intelligence), and a Security policy to block the tagged group. This leverages User-ID and is ideal for user-based blocking.

Topics

#Dynamic User Groups#User-ID#Automated Threat Response#Log Forwarding

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice