Palo Alto Networks Certified Network Security Administrator (PCNSA) — Question 155

Which attribute can a dynamic address group use as a filtering condition to determine its membership?

Answer options

• A. subnet mask
• B. tag
• C. IP address
• D. wildcard mask

Correct answer: B

Explanation

The correct answer is B, as dynamic address groups utilize tags to determine membership based on specific attributes assigned to addresses. The other options, such as subnet mask, IP address, and wildcard mask, do not serve as filtering conditions for dynamic address groups.