Palo Alto Networks System Engineer – Strata — Question 85

What are two ways to manually add and remove members of dynamic user groups (DUGs)? (Choose two.)

Answer options

• A. Tag the user through Active Directory.
• B. Tag the user using Panorama or the Web UI of the firewall.
• C. Tag the user through the firewall's XML API.
• D. Add the user to an external dynamic list (EDL).

Correct answer: B, C

Explanation

The correct answers are B and C because both methods allow for direct tagging of users to manipulate membership in dynamic user groups. Option A is incorrect as it pertains to user management in Active Directory, which does not directly affect DUG membership, and option D involves external lists rather than direct tagging.