SD-WAN-Engineer Practice Test 2 — 10 Questions

Question 1

Which TWO methods can be used to identify traffic for a policy?

Accepted Answer

Source/Destination IP addresses. Traffic can be identified by application or by IP/port-based rules.

Answer

Router model

Answer

Device serial number

Answer

Physical port location

Question 2

Which THREE settings are typically defined during the initial ION site provisioning?

Accepted Answer

WAN interface settings. Provisioning involves setting up basic connectivity, identifying the site, and assigning basic policies.

Answer

Annual maintenance schedule

Answer

Global DNS server settings

Question 3

You are troubleshooting a performance issue where traffic is not taking the preferred path. Which tool in the Controller helps you visualize the path taken?

Accepted Answer

Flow Monitoring. The path visualization tool displays the real-time path selected by the SD-WAN engine.

Answer

Interface counters

Answer

System Logs

Answer

Packet Capture

Question 4

If a user at a branch site reports that they cannot access a specific internal server, which diagnostic tool should you use first?

Accepted Answer

Review Flow Monitoring logs. Flow monitoring allows you to see if traffic is hitting the expected policy and where it is being dropped or steered.

Answer

Check the cloud status page

Answer

Check physical cables

Answer

Reboot the ION

Question 5

Which TWO factors are used by Prisma SD-WAN to determine the health of a WAN path?

Accepted Answer

Packet loss. The SD-WAN engine monitors latency and loss to calculate path quality.

Answer

Physical cable color

Answer

Power supply status

Answer

ISP name

Question 6

Which THREE actions can be performed by a Prisma SD-WAN 'Policy' object?

Accepted Answer

Path selection. Policies can steer traffic, prioritize it, or apply security constraints.

Answer

Hardware replacement

Answer

Firmware updates

Question 7

When integrating Prisma SD-WAN with a cloud-based security service provider (CSSP) via CloudBlades, which setting must be verified to ensure proper traffic redirection?

Accepted Answer

Service-to-Tunnel Mapping. The service mapping in CloudBlades ensures that traffic classified for security inspection is steered to the correct CSSP node.

Answer

Local ISP DNS settings

Answer

DHCP Server scope

Answer

VLAN ID matching

Question 8

When planning for a large-scale deployment, which items are required for the initial site information gather? (Choose THREE)

Accepted Answer

Total bandwidth per link. Knowing local WAN IPs, LAN subnets, and bandwidth requirements is essential for design.

Answer

Local desk configurations

Answer

Employee names

Question 9

What is the primary benefit of enabling 'Forward Error Correction' (FEC) on a high-latency WAN link?

Accepted Answer

It improves performance for jitter-sensitive traffic. FEC adds redundant data to packets, allowing the receiver to reconstruct lost packets without retransmission.

Answer

It bypasses the firewall

Answer

It replaces the need for QoS

Answer

It reduces total bandwidth usage

Question 10

When configuring a security policy, what is the purpose of an 'Application' object?

Accepted Answer

To identify traffic by application signatures rather than just ports. Application objects identify traffic by signature, allowing for specific policy control.

Answer

To set the bandwidth limit

Answer

To define the physical interface

Answer

To define the user identity