Palo Alto Networks System Engineer – Strata — Question 45

What aspect of PAN-OS allows for the NGFW admin to create a policy that provides auto-remediation for anomalous user behavior and malicious activity while maintaining user visibility?

Answer options

• A. Remote Device UserID Agent
• B. user-to-tag mapping
• C. Dynamic User Groups
• D. Dynamic Address Groups

Correct answer: C

Explanation

Dynamic User Groups allow the creation of policies that automatically adjust based on user behavior, facilitating auto-remediation for anomalies while keeping user visibility intact. The other options, such as Remote Device UserID Agent, user-to-tag mapping, and Dynamic Address Groups, do not specifically provide the same level of automation and visibility in response to user behavior.