Palo Alto Networks Certified Network Security Administrator (PCNSA) — Question 25

Which two features can be used to tag a username so that it is included in a dynamic user group? (Choose two.)

Answer options

• A. GlobalProtect agent
• B. XML API
• C. User-ID Windows-based agent
• D. log forwarding auto-tagging

Correct answer: B, D

Explanation

The XML API allows for programmatic tagging of users, making it a suitable choice for dynamic user groups. Log forwarding auto-tagging also automatically tags users based on log data, which is essential for dynamic group inclusion. The GlobalProtect agent and User-ID Windows-based agent do not provide tagging capabilities in this context.