ExamGecko
Question list
Search
Search

Question 17 - PCSFE discussion

Report
Export

Which component allows the flexibility to add network resources but does not require making changes to existing policies and rules?

A.
Content-ID
Answers
A.
Content-ID
B.
External dynamic list
Answers
B.
External dynamic list
C.
App-ID
Answers
C.
App-ID
D.
Dynamic address group
Answers
D.
Dynamic address group
Suggested answer: D

Explanation:

Dynamic address group is the component that allows the flexibility to add network resources but does not require making changes to existing policies and rules. Dynamic address group is an object that represents a group of IP addresses based on criteria such as tags, regions, interfaces, or userdefined attributes. Dynamic address group allows Security policies to adapt dynamically to changes in the network topology or workload characteristics without requiring manual updates. Content-ID, External dynamic list, and App-ID are not components that allow the flexibility to add network resources but do not require making changes to existing policies and rules, but they are related features that can enhance security and visibility. Reference: Palo Alto Networks Certified Software Firewall Engineer (PCSFE), [Dynamic Address Groups Overview], [Content-ID Overview], [External Dynamic Lists Overview], [App-ID Overview]

asked 23/09/2024
Gale Morgan
45 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first