Exam PCNSE topic 1 question 11 discussion

The correct answer is: B. Restful API or the VMware API on the firewall or on the User-ID agent Explanation: Dynamic Tag Registration on Palo Alto Networks Next-Generation Firewalls (NGFWs) allows the firewall to automatically assign tags to IP addresses based on information received from external sources. These tags can then be used in security policies for granular control. The methods to dynamically register tags are: RESTful API: The firewall can receive tag information from external systems (e.g., cloud platforms, SIEMs, or custom scripts) via RESTful API calls. VMware API: If the firewall is integrated with VMware environments, it can use the VMware API to dynamically tag virtual machines (VMs) based on attributes like VM names, tags, or other metadata. User-ID Agent: The User-ID agent can also be used to register tags dynamically by correlating IP addresses with user or group information from directory services (e.g., Active Directory).

It’s D, found PA article vmware plug-in to link vcenter with panorama , xml API for PA firewall

D is the correct answer

Answer is D. https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/policy/register-ip-addresses-and-tags-dynamically

PAN-OS XML API USAGE - read the topic from PA documentation

https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-admin/policy/monitor-changes-in-the-virtual-environment/use-dynamic-address-groups-in-policy#:~:text=To%20dynamically%20register%20tags%2C%20you%20can%20use%20the%20XML%20API%20or%20the%20VM%20Monitoring%20agent%20on%20the%20firewall%20or%20on%20the%20User%2DID%20agent.

it will be D . Reference: https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/policy/register-ip-addresses-and-tags-dynamically

https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/policy/monitor-changes-in-the-virtual-environment/use-dynamic-address-groups-in-policy

D is a correct one https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-admin/policy/monitor-changes-in-the-virtual-environment/use-dynamic-address-groups-in-policy.html

D only

Correct is D XML API—The firewall and Panorama support an XML API that uses standard HTTP requests to send and receive data. You can use this API to register IP addresses and tags with the firewall or Panorama. API calls can be made directly from command line utilities such as cURL or using any scripting or application framework that supports REST-based services. Refer to the PAN-OS XML API Usage Guide for details.

only D

Answer: D

Correct Answer: D To dynamically register tags, you can use the XML API or the VM Monitoring agent on the firewall or on the User-ID agent.

D is correct

D is correct

answer is D :