Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 85

Which two features can be used to tag a username so that it is included in a dynamic user group? (Choose two.)

Answer options

• A. log forwarding auto-tagging
• B. XML API
• C. GlobalProtect agent
• D. User-ID Windows-based agent

Correct answer: A, B

Explanation

The correct answers are A and B because log forwarding auto-tagging allows usernames to be tagged automatically based on log data, and the XML API provides programmatic access to tag users. The GlobalProtect agent and User-ID Windows-based agent, while useful for other functions, do not directly relate to tagging usernames for dynamic user groups.