ExamGecko
Question list
Search
Search

Question 323 - PCNSA discussion

Report
Export

Which two options does the firewall use to dynamically populate address group members? (Choose two.)

A.
IP Addresses
Answers
A.
IP Addresses
B.
Tags
Answers
B.
Tags
C.
MAC Addresses
Answers
C.
MAC Addresses
D.
Tag-based filters
Answers
D.
Tag-based filters
Suggested answer: B, D

Explanation:

A dynamic address group populates its members dynamically using look ups for tags and tag-based filters. Tags are metadata elements or attribute-value pairs that are registered for each IP address. Tag-based filters use logical and and or operators to match the tags and determine the membership of the dynamic address group. For example, you can create a dynamic address group that includes all IP addresses that have the tags ''web-server'' and ''linux''. You can also use static tags as part of the filter criteria.Reference:Policy Object: Address Groups,Use Dynamic Address Groups in Policy,Statics vs. Dynamic Address Objects Groups

asked 23/09/2024
Tristan Zerner
45 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first