Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 136

Updates to dynamic user group membership are automatic therefore using dynamic user groups instead of static group objects allows you to:

Answer options

• A. respond to changes in user behaviour or potential threats using manual policy changes
• B. respond to changes in user behaviour or potential threats without manual policy changes
• C. respond to changes in user behaviour or potential threats without automatic policy changes
• D. respond to changes in user behaviour and confirmed threats with manual policy changes

Correct answer: B

Explanation

The correct answer is B because dynamic user groups adjust membership automatically, allowing for real-time responses to changes without needing manual intervention. Options A, C, and D all imply some form of manual policy change, which contradicts the benefit of using dynamic user groups.