Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Palo Alto Networks Certified Network Security Engineer (PCNSE) · Palo Alto Networks
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
The correct answer is: B. Restful API or the VMware API on the firewall or on the User-ID agent Explanation: Dynamic Tag Registration on Palo Alto Networks Next-Generation Firewalls (NGFWs) allows the firewall to automatically assign tags to IP addresses based on information received from external sources. These tags can then be used in security policies for granular control. The methods to dynamically register tags are: RESTful API: The firewall can receive tag information from external systems (e.g., cloud platforms, SIEMs, or custom scripts) via RESTful API calls. VMware API: If the firewall is integrated with VMware environments, it can use the VMware API to dynamically tag virtual machines (VMs) based on attributes like VM names, tags, or other metadata. User-ID Agent: The User-ID agent can also be used to register tags dynamically by correlating IP addresses with user or group information from directory services (e.g., Active Directory).
It’s D, found PA article vmware plug-in to link vcenter with panorama , xml API for PA firewall
D is the correct answer