Deployment And Configuration

Which command or interface action is used to verify the current status of the SD-WAN overlay tunnels?

A branch office requires local breakout for SaaS traffic. How do you configure the policy to ensure this traffic does not traverse the data center?

You are implementing a QoS policy. Why would you configure a 'Shaping' rate on a WAN interface?

What is the impact of assigning a site to a specific 'Site Group' in a Prisma SD-WAN policy?

You are configuring a path policy to prioritize VoIP traffic. Which specific metric should you leverage to ensure the best call quality when multiple paths are available?

When configuring an ION device as a gateway for a cloud environment, what is the primary role of a 'Service' interface?

When deploying a new ION device, which Prisma SD-WAN component is primarily used to initiate the zero-touch provisioning process?

When configuring a security policy, what is the purpose of an 'Application' object?

In a multi-VRF deployment, what must be configured to allow traffic to move between two different VRFs?

What does the 'App-ID' feature provide in a security policy?

What is the effect of changing the 'Path Selection' strategy from 'Latency' to 'Lowest Cost' in a policy?

How does a 'Failover' policy differ from a 'Load Balancing' policy in Prisma SD-WAN?

When setting up a branch site, what is the purpose of the 'Underlay' configuration?

You need to restrict administrative access to the ION device. Where is this configured?

How does Prisma SD-WAN handle DNS queries for branch users?

Where are the primary SD-WAN routing policies defined?

What is the purpose of 'Bandwidth Groups' in Prisma SD-WAN?

If a user at a branch site reports that they cannot access a specific internal server, which diagnostic tool should you use first?

Which Prisma SD-WAN component is responsible for orchestrating the overall security policy across the entire fabric?

What is the primary function of the 'Controller' dashboard in the Prisma SD-WAN UI?

When using Prisma SD-WAN with Prisma Access, how is the secure tunnel established?

You need to ensure that traffic from a specific subnet is placed into a unique VRF. How is this achieved?

Which TWO factors are used by Prisma SD-WAN to determine the health of a WAN path?

When configuring 'NAT', what is the difference between 'Source NAT' and 'Destination NAT'?

Which THREE components are involved in configuring Prisma SD-WAN security policies?

Which THREE types of information are displayed in the Prisma SD-WAN 'Flow Monitoring' view?

Which TWO items are considered 'Underlay' resources in a Prisma SD-WAN configuration?

Which THREE actions can be performed by a Prisma SD-WAN 'Policy' object?

Which TWO of the following are benefits of using Prisma SD-WAN?

Which THREE items are included in a Prisma SD-WAN 'Site' configuration?

Which THREE settings are typically defined during the initial ION site provisioning?

Which TWO components are essential for maintaining the SD-WAN control plane?

Which TWO features are used to monitor the performance of an application across the SD-WAN?

A customer wants to prioritize Office 365 traffic over general web traffic. What is the most efficient way to achieve this?

An engineer is deploying a new branch ION device that will connect to two different ISPs. The design requires that return traffic from the data center follows the same WAN path that the outbound session used, so that stateful inspection appliances in the data center see both directions of every flow. Which configuration on the branch ION device satisfies this requirement?

A network engineer is deploying a new branch office with a single Prisma SD-WAN ION device. The branch has two WAN links: a primary fiber circuit and a backup LTE connection. The engineer wants the ION device to automatically establish secure tunnels to the Prisma SD-WAN controller and to the nearest data center without manual intervention. Which deployment method should the engineer use?

A network engineer is deploying a new branch ION device at a site with dual WAN circuits: a primary 500 Mbps fiber link and a secondary 100 Mbps LTE link. The design requires that the LTE link only carry traffic when the fiber link fails, and that all traffic return to the fiber link automatically once it recovers. Which configuration should the engineer apply on the ION device?

A network engineer is deploying a new branch ION device at a site with two WAN links and wants to guarantee that business-critical voice traffic always uses the lowest-latency path, even when one link degrades. Which Prisma SD-WAN configuration should be applied to the branch ION device to meet this requirement?

A network architect is designing a Prisma SD-WAN deployment for a retail customer with 200 small branches. Each branch has a single ION device and one broadband circuit. The customer wants centralized policy management and minimal on-site configuration. Which TWO deployment components are required to meet these goals? (Choose two.)

A network administrator is configuring a Prisma SD-WAN branch ION device that will connect to the internet via a single ISP link. The administrator needs to ensure that the device can establish a secure control plane connection to the Prisma SD-WAN controller. Which configuration is required on the ION device?

An engineer is configuring a Prisma SD-WAN policy to route guest Wi-Fi traffic directly out of the local branch internet circuit instead of sending it to the data center. The guest traffic must not traverse the SD-WAN overlay. Which policy type should the engineer use?

A network engineer is deploying a new branch location with a Prisma SD-WAN ION device. The branch has two WAN circuits: a primary fiber link and a backup LTE link. The engineer wants the ION device to automatically use the LTE link only when the fiber link fails. Which configuration should be applied to achieve this behavior?

A network engineer is deploying a Prisma SD-WAN solution at a branch site with two WAN links: a primary MPLS link and a secondary broadband link. The engineer wants to ensure that if the MPLS link fails, all traffic automatically switches to the broadband link without manual intervention. Which configuration should be applied?

A multinational company is deploying Prisma SD-WAN at a branch that has a single MPLS circuit and a broadband internet link. The security team requires that all traffic destined to the corporate data center must traverse the MPLS circuit, while internet-bound traffic should use the broadband link. However, if the MPLS circuit fails, data center traffic should fail over to the broadband link with IPsec encryption. Which configuration achieves this requirement?

A network engineer is deploying a new ION device at a branch that uses a DSL circuit with a dynamic public IP address from the ISP. The branch must establish SD-WAN tunnels to the controller and to other sites. Which configuration must the engineer verify to ensure the tunnels come up reliably?

A branch ION device is being deployed with a single WAN circuit that is provisioned as a DHCP client. The engineer needs the device to be reachable from the corporate management system for ongoing monitoring, but the ISP does not offer a static IP. Which configuration should the engineer apply on the ION device to meet this requirement?

A network engineer is configuring a Prisma SD-WAN ION device at a branch that has a single WAN link with a public IP address. The branch also has a local subnet of 192.168.10.0/24. The engineer wants to ensure that all traffic from the local subnet to the internet is translated to the WAN IP address. Which type of NAT should be configured?

A network administrator is configuring a new ION device at a branch. The administrator wants the device to obtain its IP address, default gateway, and DNS server automatically from the local ISP's DHCP server on the WAN interface. Which WAN interface configuration mode should be selected?

A network administrator is preparing to bring a new branch online with Prisma SD-WAN. The branch has no IT staff, and the administrator wants the ION device to receive its full configuration automatically when it is powered on and connected to the internet. Which feature should the administrator use?

An engineer is configuring a Prisma SD-WAN ION device at a branch. The branch has a single WAN link with a public IP address. The internal LAN uses private IP addresses. The engineer needs to allow internal users to access the internet while hiding their private IP addresses. Which configuration is required?

A network engineer is deploying a new branch with two ION devices for high availability. The engineer wants both devices to share a single virtual IP address on the LAN side so that hosts use a consistent default gateway even if one device fails. Which LAN-side configuration should be implemented?

A network architect is designing a Prisma SD-WAN deployment for a company with 50 branches. Each branch has two internet links from different ISPs. The architect wants to ensure that business-critical applications always use the best-performing link based on real-time latency, jitter, and packet loss. Additionally, the architect wants to avoid using a link that is experiencing high packet loss. Which Prisma SD-WAN feature should be configured to meet these requirements?

A network engineer is configuring a Prisma SD-WAN branch site with two WAN links: a primary MPLS link and a secondary broadband link. The engineer wants to ensure that business-critical traffic uses the MPLS link and fails over to broadband only when the MPLS link's latency exceeds 100 ms. Which configuration is required to achieve this?

A network engineer is deploying a Prisma SD-WAN solution at a branch site with two WAN links. The engineer wants to ensure that the branch can automatically fail over from the primary link to the secondary link when the primary link experiences high latency or packet loss. Which TWO configuration steps are required to achieve this? (Choose two.)

A network engineer is troubleshooting a branch ION device that fails to establish a control connection to the Prisma SD-WAN controller. The engineer verifies that the WAN interface has a valid IP address and can ping the default gateway. Which configuration issue is most likely preventing the control connection?

A network engineer is preparing to deploy a new branch ION device that will use a single LTE circuit as its only WAN connection. The design requires that the device not consume the metered data plan during initial software staging, and that it validate its configuration against the controller before carrying production traffic. Which deployment approach best meets these requirements?

A network engineer is configuring a new Prisma SD-WAN branch site. The branch has two WAN circuits from different providers. The engineer wants to ensure that if one circuit degrades in performance, traffic is automatically moved to the other circuit without manual intervention. Which feature should the engineer configure to achieve this?

An engineer is configuring a Prisma SD-WAN policy to ensure that voice traffic from a branch is always sent over the MPLS circuit, while all other traffic uses the internet circuit. The engineer creates an application policy with a match on voice applications and sets the action to use the MPLS path. However, after deployment, voice traffic is still traversing the internet circuit. Which configuration issue is the most likely cause?

An engineer is deploying a Prisma SD-WAN branch site where the ION device will use a single LTE WAN link with a dynamic public IP address assigned by the carrier. The device must establish a control connection to the Prisma SD-WAN controller and be managed centrally. Which deployment method should the engineer use?

A network engineer is configuring a Prisma SD-WAN ION device at a branch site. The branch has a single WAN link with a static public IP address. The internal LAN uses private IP addresses. The engineer wants to allow internal users to access the internet using the public IP address. Which feature should the engineer configure on the ION device?

An engineer is configuring a Prisma SD-WAN ION device at a branch with two WAN interfaces: one for internet and one for MPLS. The engineer wants to ensure that the ION uses the MPLS link for traffic to the data center and the internet link for cloud applications. What should the engineer configure?

An engineer is deploying a Prisma SD-WAN ION at a branch that will use a single MPLS circuit for connectivity to the data center and a broadband internet link for direct internet access. The engineer wants to ensure that if the MPLS circuit fails, traffic to the data center automatically fails over to the broadband link. What should the engineer configure?