What can a firewall use to automatically update Security policies with new IP address information for a virtual machine (VM) when it has moved from host-A to host-B because host-A is down or…

The correct answer is A. Dynamic Address Groups. When a virtual machine moves between hosts and its IP address changes (or if it's assigned a new IP from a pool), traditional static security policies become ineffective. Dynamic Address Groups solve this problem. Dynamic Address Groups: These groups automatically update their…

Policy Automation and Dynamic Address Groups

Question

What can a firewall use to automatically update Security policies with new IP address information for a virtual machine (VM) when it has moved from host-A to host-B because host-A is down or undergoing periodic maintenance?

Options

ADynamic Address Groups
BDynamic User Groups
CDynamic Host Groups
DDynamic IP Groups

How the community answered

(16 responses)

A
88% (14)
B
6% (1)
C
6% (1)

Explanation

When a virtual machine moves between hosts and its IP address changes (or if it's assigned a new IP from a pool), traditional static security policies become ineffective. Dynamic Address Groups solve this problem. Dynamic Address Groups: These groups automatically update their membership based on criteria such as tags, VM names, or other dynamic attributes. When a VM moves and its IP address changes, the Dynamic Address Group automatically updates its membership, ensuring that security policies remain effective without manual intervention. This is the correct solution for this

Topics

#Dynamic Address Groups#VM migration#Security policy automation#IP-tag registration

Community Discussion

No community discussion yet for this question.

Full PSE-SWFW-PRO-24 Practice