Next-Generation Firewall Engineer

An organization wants to consolidate its separate proxy appliance and its firewall onto one platform while managing policy centrally. Based on PAN-OS web proxy capabilities, which deployment options can the engineer configure?

An engineer needs to enforce security policy for IoT and other endpoints whose IP addresses and physical locations change frequently. Which PAN-OS networking feature allows policy rules to follow the device regardless of these changes?