Which component allows the flexibility to add network resources but does not require making changes to existing policies and rules?

Which component allows the flexibility to add network resources but does not require making changes to existing policies and rules?
A . Content-ID
B . External dynamic list
C . App-ID
D . Dynamic address group

View Answer

Answer: D

Explanation:

Dynamic address group is the component that allows the flexibility to add network resources but does not require making changes to existing policies and rules. Dynamic address group is an object that represents a group of IP addresses based on criteria such as tags, regions, interfaces, or user-defined attributes. Dynamic address group allows Security policies to adapt dynamically to changes in the network topology or workload characteristics without requiring manual updates. Content-ID, External dynamic list, and App-ID are not components that allow the flexibility to add network resources but do not require making changes to existing policies and rules, but they are related features that can enhance security and visibility.

Reference: Palo Alto Networks Certified Software Firewall Engineer (PCSFE), [Dynamic Address Groups Overview], [Content-ID Overview], [External Dynamic Lists Overview], [App-ID Overview]