SD-WAN-Engineer practice questions 11–19

1. Question 11 · 19 in bank

   A network engineer isle to ping and traceroute from SD-WAN branch IP 192.168.1.123 to servers in primary data center – DC1, but is unable to ping or traceroute to a server 10.2.2.22 in the newly configured secondary data center, DC2. The DC2 ION device is advertising the branch IP subnet 192.168.1.0/24 to the DC2 core via eBGP Core Peer. The DC2 data center site has site prefix 10.2.2.0/23 configured. Which configuration will resolve the issue in this scenario?

   • AThe default 0.0.0.0/0 static route to the DC2 ION pointing to the DC2 next hop.
   • BReconfigure eBGP Core Peer to iBGP Core Peer.
   • CReconfigure eBGP Core Peer as Edge Peer type.
   • DRemove site prefix 10.2.2.0/23 from DC2 site configuration.

   Show answer

   Answer: C

   Next question

2. Question 12 · 19 in bank

   A network administrator for an organization using Prisma SD-WAN needs to identity the top applications specifically associated with the primary data center site. Which WAN Clarity report approach will be most effective in this use case?

   • ATraffic Distribution: Top Applications report, when viewed in the context of the primary data center site, to list applications by their consumption directly related to that site’s traffic.
   • BApplication Performance report, globally aggregated across all sites, to see which applications have the highest overall bandwidth usage, then correlate these with known data center services
   • CHotspots: Undefined Domains report, specifically filtered for the data center site, to identify high-bandwidth FQDNs that might represent applications hosted in the data center
   • DUtilization Quadrant report, focusing on the WAN circuits directly connected to the data center, to infer high application bandwidth from periods of high circuit use.

   Show answer

   Answer: A

   Next question

3. Question 13 · 19 in bank

   Select 2

   What are two potential causes when a secondary public circuit has been added to the branch site, but the Prisma SD-WAN tunnel is not forming to the data center? (Choose two.)

   • AInterface role is not selected as “internet.”
   • BCircuit label is missing from interface type.
   • CDNS is not configured.
   • DInterface scope is set to “local.”

   Show answer

   Answer: AB

   Next question

4. Question 14 · 19 in bank

   Which statement is valid when integrating Prisma SD-WAN with Prisma Access remote networks?

   • ASecurity policies for remote networks are configured in Prisma Access and pushed to Prisma SD-WAN for enforcement on the branch ION devices.
   • BEasy onboarding automatically recommends the closest preconfigured remote network security processing nodes and can be overridden manually.
   • CA branch with multiple internet circuits will automatically connect to Prisma Access on each circuit and will be used in an active/standby manner for internet-bound traffic.
   • DBandwidth must be allocated to each Prisma Access remote network compute location, and this bandwidth is shared between all branches that terminate on this remote network node.

   Show answer

   Answer: B

   Next question

5. Question 15 · 19 in bank

   In a data center (DC) with two ION devices, all of the remote branch Prisma SD-WAN VPNs are active only on DC ION-1. Why are no VPNs active on DC ION-2?

   • AThe BGP core peer is down.
   • BThe static route to core as a next hop is missing.
   • CThe ION device is behind a NAT.
   • DThe DC and branches are in a different domain.

   Show answer

   Answer: D

   Next question

6. Question 16 · 19 in bank

   Select 2

   Based on the HA topology image below, which two statements describe the end-state when power is removed from the ION 1200-S labeled “Active”, assuming that the ION labeled “Standby” becomes the active ION? (Choose two.)

   

   • ABoth the connection to ISP A and the connection to LTE/5G will be usable.
   • BThe VRRP Virtual IP address assigned to any SVIs will be moved to the newly active ION.
   • CThe newly active ION will send a gratuitous ARP to the LAN for the IP address of any SVIs.
   • DThe connection to ISP A will be usable, but the connection to LTE/5G will not.

   Show answer

   Answer: AC

   Next question

7. Question 17 · 19 in bank

   What is the default action for real-time media applications if link performance is poor?

   • ADrop the flow.
   • BMove flows.
   • CApply Forward Error Correction (FEC).
   • DRaise an alarm.

   Show answer

   Answer: C

   Next question

8. Question 18 · 19 in bank

   When an ION device has been claimed, the cloud-based controller generates and communicates with the device by which method?

   • AManufacturer Installed Certificate (MIC)
   • BExisting customer public key infrastructure (KPI)
   • CSelf-signed certificate
   • DCustomer Installed Certificate (CIC)

   Show answer

   Answer: A

   Next question

9. Question 19 · 19 in bank

   Which troubleshooting step should be taken when users at a branch site are experiencing a maximum throughput of 200 Mbps for Direct Internet Access (DIA) traffic on a 1Gbps internet connection?

   • AEnsure QoS policy is applies to the site.
   • BEnsure the WAN interface is set to 1 Gbps or auto mode.
   • CEnsure performance policy is applied to the site.
   • DEnsure the circuit configuration at the site level is properly set.

   Show answer

   Answer: B

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SD-WAN-Engineer practice, question 11. 19 questions available.