Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Palo Alto Networks Certified Network Security Administrator (PCNSA) · Palo Alto Networks
Select 2 answers.
This question asks for 2 answers, but our data marks only 1. Compare with the community discussion below for the full answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
B&D for me: Auto-tagging allows the firewall or Panorama to tag a policy object when it receives a log that matches specific criteria and establish IP address-to-tag or user-to-tag mapping. For example, when the firewall generates a threat log, you can configure the firewall to tag the source IP address or source user in the threat log with a specific tag name. You can then use these tags to automatically populate policy objects such as dynamic user groups or dynamic address groups. https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/policy/use-auto-tagging-to-automate-security-actions
I just checked question 96 and the answer for this must be B and C https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-new-features/user-id-features/dynamic-user-groups
B. XML API The XML API can be used to programmatically tag usernames. This allows administrators to dynamically assign tags to users based on various criteria or external inputs. These tags can then be used to include the users in dynamic user groups. D. Log forwarding auto-tagging Log forwarding auto-tagging allows for automated tagging based on log entries. When specific logs match predefined criteria, the system can automatically tag the associated usernames. These tags are then used to include the users in dynamic user groups.