SD-WAN-Engineer practice questions 1–10

1. Question 1 · 19 in bank

   Select 2

   When identifying devices for IoT classification purposes, which two methods does Prisma SD-WAN use to discover devices that are not directly connected to the branch ION? (Choose two.)

   • ALLDP
   • BCDP
   • CSNMP
   • DSyslog

   Show answer

   Answer: CD

   Next question

2. Question 2 · 19 in bank

   Select 2

   User-ID integration is configured for a Prisma SD-WAN deployment. Branch- 1 has the user-to-IP mappings available, and User-1 is mapped to IP-1. To which two use cases can User-ID based zone-based firewall policies be applied? (Choose two.)

   • AUser-1 accessing a SaaS application on direct internet and source User-ID based zone-based firewall rules on Branch-1 ION
   • BUser-1 accessing a private application within Branch-1, and source User-ID based zone-based firewall rules on Branch-1 ION
   • CUser-1 accessing a private application in data center via SD-WAN overlay, and destination User-ID based zone-base firewall rules DC ION
   • DUser-1 accessing a private application in Branch-2 via SD-WAN overlay, and destination User-ID based zone-based firewall rules on Branch-2 ION

   Show answer

   Answer: AB

   Next question

3. Question 3 · 19 in bank

   A site has two internet circuits: Circuit A with 500 Mbps capacity and Circuit B with 100 Mbps capacity. Which path policy configuration will ensure traffic is automatically shifted from a saturated circuit to the circuit with available bandwidth?

   • ACircuit A as an active, Circuit B as a backup
   • BCircuit B as an active, Circuit A as a backup
   • CBoth circuits under active path
   • DCircuit B as an L3 failure path

   Show answer

   Answer: C

   Next question

4. Question 4 · 19 in bank

   Select 2

   Site templates are to be used for the large-scale deployment of 100 Prisma SD-WAN branch sites across different regions. Which two statements align with the capabilities and best practices for Prisma SD-WAN site templates? (Choose two.)

   • AThe use of Jinja conditional statements within a site template is not supported, thereby limiting dynamic customization options.
   • BMandatory variables for any site template include the site name, ION software version, and at least one ION serial number /device name pair.
   • CSite templates offer the capability to pre-stage device configurations by creating a device shell.
   • DOnce a site has been deployed using a template, its configuration can be updated or modified by applying an updated version of the template.

   Show answer

   Answer: CD

   Next question

5. Question 5 · 19 in bank

   In which modes can a Prisma SD-WAN branch be deployed?

   • ATesting, Control, POV
   • BProduction, Control, Disabled
   • CDisabled, Analytics, Control
   • DPOV, Production, Analytics

   Show answer

   Answer: C

   Next question

6. Question 6 · 19 in bank

   Select 2

   What are two requirements for implementing user/group-based path policies? (Choose two.)

   • ACloud Identity Engine
   • BInternal host detection
   • CAutonomous Digital Experience Manager (ADEM)
   • DData center ION

   Show answer

   Answer: AB

   Next question

7. Question 7 · 19 in bank

   A multinational company is deploying Prisma SD-WAN across North America, Europe, and Asia. The data centers in the North America region have served all regions, but regional policies are now being enforced that mandate each of the regions to build their own data centers and branch sites to only connect to their respective regional data centers. How can this regionalization be achieved so that new or existing branch sites only build tunnels to the regional DC IONs?

   • ACreate a new cluster for each regional DC ION and move the sites from the existing cluster to the new cluster.
   • BDisable to auto-tunnel feature globally on the Prisma SD-WAN portal and manually create all necessary tunnels exclusively between IONs within their designated regions.
   • CRemove the circuit labels and apply new circuit labels for in-region circuits only.
   • DAssign WAN interfaces to distinct Virtual Routing and Forwarding (VRF) instances for each region on the DC IONs, ensuring that branches only connect to the WAN interfaces/VRFs designated for their region.

   Show answer

   Answer: C

   Next question

8. Question 8 · 19 in bank

   By default, how many days will Prisma SD-WAN VPNs stay operational before the keys expire when an ION device loses connection with the controller?

   • A1
   • B3
   • C5
   • D7

   Show answer

   Answer: D

   Next question

9. Question 9 · 19 in bank

   What is the number and structure of Prisma SD-WAN QoS queues supported per WAN interface?

   • A12 queues 4 classes 3 application criteria within each class
   • B16 queues 4 classes 4 application criteria with each class
   • C8 queues 1 priority queue 7 non-priority queues
   • D8 queues 2 classes 4 application criteria within each class

   Show answer

   Answer: C

   Next question

10. Question 10 · 19 in bank

    Which IONs can support Branch Gateway?

    • A3102V, 3200, 1200S, 5200
    • B1200, 3200, 9200, 7108V
    • C3104V, 1200S, 5200, 7108V
    • D9200, 3200, 5200, 7116V

    Show answer

    Answer: D

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SD-WAN-Engineer practice, question 1. 19 questions available.