Which two policy components are required to block traffic in real time using a dynamic user group (DUG)? (Choose two.)

A. A Decryption policy to decrypt the traffic and see the tag

B. A Deny policy with the “tag” App-ID to block the tagged traffic

C. An Allow policy for the initial traffic

D. A Deny policy for the tagged traffic








 

Suggested Answer: BC



This question is in PCNSE Palo Alto Networks Certified Network Security Engineer Exam
For getting Palo Alto Networks Certified Network Security Engineer (PCNSE) Certificate



Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by Palo Alto Networks.
Trademarks, certification & product names are used for reference only and belong to Palo Alto Networks.
The website does not contain actual questions and answers from Palo Alto Networks's Certification Exams.