From the PCNSE study guide, Dynamic User Groups (page 106):
Usernames also can be tagged and untagged using the autotagging feature in a Log Forwarding Profile. You also can program another utility to invoke PAN-OS XML API commands to tag or untag usernames. In the web interface you can use logical AND or OR operators with the tags to better filter or match against. You can configure a timeout value that determines when a username will be untagged automatically.
Based on that paragraph, A&B are the correct answers.
BD
https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-new-features/user-id-features/dynamic-user-groups.html
To dynamically register tags, you can use:
the XML API
the User-ID agent
Panorama
the web interface on the firewall
On that same link though: The firewall redistributes the tags for the dynamic user group to the next hop and you can configure log forwarding to send the logs to a specific server. Log forwarding also allows you to use auto-tagging to automatically add or remove members of dynamic user groups based on events in the logs.
A and B
From PCNSE-Study-Guide
Usernames can also be tagged and untagged using the auto-tagging feature in a Log Forwarding Profile. You also can program another utility to invoke PAN-OS XML API commands to tag or untag usernames.
I think confusion comes from mixing two different "tools" 1. auto-tagging users to include them in DUG and 2. dynamically register tags. Those are two different operations.
-to auto-tag users to DUG:
auto-tagging in log-forwarding,
XML API
-to dynamically add tags:
XML API, Panorama, User-ID
-to statically add tags:
WebUI
On one side the study guide and the doc referred below confirm about the XML API & the Log Forwarding Profile Auto-Tagging.
On the other side, the User-ID agent mentioned on the below document, refer to the Panorama User-ID agent and Remote-Firewall User-ID agent, in other words the redistribution agents "Step 6 -2"
https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/policy/use-dynamic-user-groups-in-policy
B and D are correct. To dynamically register tags, you can use:
- the XML API
- the User-ID agent
- Panorama
- the web interface on the firewall
Please refer to https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/policy/use-dynamic-user-groups-in-policy
On PAN-OS 10.1 the options are:
To dynamically register tags, you can use:
the XML API
the User-ID agent
Panorama
the web interface on the firewall
https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/policy/use-dynamic-user-groups-in-policy
B/D
To dynamically register tags, you can use:
the XML API
the User-ID agent
Panorama
the web interface on the firewall
https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-new-features/user-id-features/dynamic-user-groups
See comment of MS_NW
BD
https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-new-features/user-id-features/dynamic-user-groups.html
To dynamically register tags, you can use:
the XML API
the User-ID agent
Panorama
the web interface on the firewall
This section is not available anymore. Please use the main Exam Page.PCNSE Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
PuckinWebGuy
Highly Voted 4 years, 2 months agoMS_NW
Highly Voted 4 years, 9 months agoChiquitabandita
1 year, 3 months agoGabranch
1 year, 4 months agoapiloran
Most Recent 9 months, 1 week ago123XYZT
11 months, 2 weeks agoAndromeda1800
1 year, 4 months agoRoamingFo
1 year, 5 months agoGabranch
1 year, 4 months agoXuzi
1 year, 5 months agoRedrum702
1 year, 10 months ago[Removed]
2 years ago[Removed]
2 years agoPochex
2 years, 1 month agoEldaby
2 years, 1 month agomohr22
2 years, 2 months agoMauz88
2 years, 2 months agomohr22
2 years, 3 months agobearfromdownunder
2 years, 3 months agoawtsuritacuna
2 years, 4 months agolazyy
2 years, 4 months ago