SD-WAN-Engineer Practice Test 10 — 10 Questions

Question 1

When troubleshooting a persistent 'Service Connection Down' status, which log type is most relevant?

Accepted Answer

Service Connection event logs. The event logs on the SD-WAN controller provide detailed status changes and errors related to Service Connection tunnels.

Answer

System health logs

Answer

User activity logs

Answer

Application performance logs

Question 2

An administrator needs to exclude specific traffic from being inspected by Prisma Access in a Unified SASE environment. Where is this defined?

Accepted Answer

In the Prisma SD-WAN Application Policy. This is defined in the Application Steering Policy by selecting a different path (e.g., direct internet) for the specific app.

Answer

In the ION device firmware settings

Answer

In the Cloud Identity Engine

Answer

Inside the Prisma Access Security Policy

Question 3

Which TWO factors contribute to the 'Path Health' score?

Accepted Answer

Packet loss. The path health score is calculated based on packet loss and latency.

Answer

Device firmware version

Answer

Number of connected users

Answer

Site name

Question 4

When integrating Prisma SD-WAN with Prisma Access, how does the system ensure that the security policy is applied to the traffic correctly based on the user's identity?

Accepted Answer

User identity is mapped via CIE and passed as metadata. The ION device retrieves user identity context, which is passed through the tunnel to Prisma Access, where the security policy is applied.

Answer

The ION device performs DPI and injects user info

Answer

Prisma Access performs IP-based reverse lookups

Answer

The SD-WAN controller acts as the identity proxy

Question 5

In a Unified SASE deployment, what is the significance of the ION device serial number?

Accepted Answer

It is used for device onboarding and policy assignment. The serial number is the unique identifier used to register the device to the controller and associate it with the SASE tenant.

Answer

It is required for user authentication

Answer

It determines the tunnel MTU

Answer

It is needed for local WAN port configuration

Question 6

Which component in the Unified SASE stack is responsible for enforcing URL filtering and threat prevention policies for remote users?

Accepted Answer

Prisma Access. Prisma Access is the SASE component that provides full security stack capabilities, including URL filtering and threat prevention.

Answer

Prisma SD-WAN ION device

Answer

Cloud Identity Engine

Answer

SD-WAN Controller

Question 7

Which component manages the configuration and policy definition for a fleet of Prisma SD-WAN ION devices?

Accepted Answer

The Prisma SD-WAN Controller. The Prisma SD-WAN Controller is the single pane of glass for managing all ION devices and policies.

Answer

Prisma Access

Answer

The Cloud Identity Engine

Answer

The ION device web UI

Question 8

Which TWO benefits does an automated Service Connection provide over a manual tunnel configuration?

Accepted Answer

Reduced manual configuration steps and lower risk of error. Automation simplifies setup and ensures consistency.

Answer

It replaces the need for firewall policies

Answer

It provides a physical connection to the datacenter

Answer

It removes the need for an SD-WAN controller

Question 9

Which TWO visibility tools help monitor the Unified SASE traffic flow?

Accepted Answer

Unified Logging Service (Cloud logging). Visibility is provided by the SD-WAN controller dashboards and the unified logging service.

Answer

Physical cable tester

Answer

Local ION device power supply status

Answer

Local printer logs

Question 10

You are configuring a path policy to prioritize VoIP traffic. Which specific metric should you leverage to ensure the best call quality when multiple paths are available?

Accepted Answer

Path performance metric. Jitter and latency are critical for voice; the policy uses performance metrics to steer traffic dynamically.

Answer

DSCP marking

Answer

Bandwidth consumption

Answer

Source IP address