PSE-SWFW-PRO-24 · Question #16
Tags can be created for which three objects? (Choose three.)
The correct answer is A. Address groups D. Address objects E. Service groups. In Palo Alto Networks (PAN-OS), tags are organizational labels that can be applied to Address Objects (D), Address Groups (A), and Service Groups (E) - all of which are core policy objects found in the Objects tab where tagging is natively supported. Tags allow administrators…
Question
Tags can be created for which three objects? (Choose three.)
Options
- AAddress groups
- BDynamic NAT objects
- CExternal dynamic lists
- DAddress objects
- EService groups
How the community answered
(25 responses)- A92% (23)
- B4% (1)
- C4% (1)
Explanation
In Palo Alto Networks (PAN-OS), tags are organizational labels that can be applied to Address Objects (D), Address Groups (A), and Service Groups (E) - all of which are core policy objects found in the Objects tab where tagging is natively supported. Tags allow administrators to filter, sort, and dynamically reference these objects in security policies.
Dynamic NAT objects (B) are NAT rules/policies, not discrete taggable objects in the Objects library - tags aren't applied at the NAT rule level in the same fashion. External dynamic lists (C) are pre-built feed objects (IP/URL/domain lists from external sources) and do not support tag assignment in PAN-OS.
Memory tip: Think "ADS" - Address objects, aDdress groups, Service groups. These are the three "building block" object types in the Objects tab that share the same tagging interface. If an object type lives outside that core Objects library or is dynamically managed, it likely doesn't support tags.
Topics
Community Discussion
No community discussion yet for this question.