Palo Alto Networks Certified Network Security Administrator (PCNSA) — Question 247

Starting with PAN-OS version 9.1, which new type of object is supported for use within the User field of a Security policy rule?

Answer options

• A. remote username
• B. dynamic user group
• C. static user group
• D. local username

Correct answer: B

Explanation

The correct answer is B, as PAN-OS version 9.1 introduced support for dynamic user groups, allowing for more flexible user management in security policies. Options A, C, and D refer to other types of user identifiers that do not provide the same level of dynamic grouping and are not new to this version.