SD-WAN-Engineer Practice Exam 2 — 20 Questions

Question 1

When using Prisma SD-WAN with Prisma Access, how is the secure tunnel established?

Accepted Answer

Automated tunnel provisioning via the Controller. The ION device automatically provisions an IPsec tunnel to the Prisma Access Cloud Service Edge (CSE).

Answer

Manual IPsec configuration

Answer

Using a BGP peer

Answer

Via a physical cable link

Question 2

What is the impact of assigning a site to a specific 'Site Group' in a Prisma SD-WAN policy?

Accepted Answer

It allows the application of policy sets to multiple sites simultaneously. Site Groups allow for scalable policy application across multiple sites with similar requirements.

Answer

It creates a new physical network

Answer

It forces all sites into the same VRF

Answer

It limits the number of peers

Question 3

In a multi-VRF deployment, what must be configured to allow traffic to move between two different VRFs?

Accepted Answer

Configure inter-VRF routing policies. Cross-VRF communication requires explicit route leaking or inter-VRF routing policies.

Answer

Enable NAT on both interfaces

Answer

Assign both to the default VRF

Answer

Disable the firewall

Question 4

Which THREE components are involved in configuring Prisma SD-WAN security policies?

Accepted Answer

Application objects. Security policies rely on application identification, zone definitions, and action rules.

Answer

Physical port numbering

Answer

Hard drive capacity

Question 5

Which THREE types of information are displayed in the Prisma SD-WAN 'Flow Monitoring' view?

Accepted Answer

Source and destination IP. Flow monitoring provides details on path, performance, and application statistics.

Answer

ISP billing records

Answer

Router CPU temperature

Question 6

Which TWO items are considered 'Underlay' resources in a Prisma SD-WAN configuration?

Accepted Answer

Public Internet broadband. Underlay refers to the physical transport connectivity.

Answer

VLAN configuration

Answer

VRF ID

Answer

IPsec tunnel

Question 7

Which TWO of the following are benefits of using Prisma SD-WAN?

Accepted Answer

Simplified management through a centralized Controller. The solution aims to simplify management and optimize performance.

Answer

Ability to bypass all laws of physics

Answer

Reduction of total electricity consumption

Answer

Elimination of all physical wiring

Question 8

You have a DCI configuration where two data centers are connected via a dedicated link. You want to ensure the DCI link is only used if the primary WAN transport fails. How do you achieve this?

Accepted Answer

Configure a lower TLOC preference on the DCI link routes.. OMP TLOC preference can be used to steer traffic to specific paths based on preference values.

Answer

Disable OMP on the primary link.

Answer

Set the OMP cost to zero.

Answer

Use a static route with a high administrative distance.

Question 9

Which THREE items are included in a Prisma SD-WAN 'Site' configuration?

Accepted Answer

Interface configuration. A site definition includes location, hardware assignment, and local interface definitions.

Answer

ISP contract end date

Answer

User password history

Question 10

If a device is stuck in 'In-Progress' during a template push, what is the first troubleshooting step?

Accepted Answer

Check the Device Tasks in vManage to view the specific error log.. The device task view provides specific error messages explaining why a push is stalling.

Answer

Reboot the vManage server.

Answer

Perform a factory reset on the device.

Answer

Change the vBond address.

Question 11

When performing a 'Soft Shutdown' on an HA device, what is the expected behavior?

Accepted Answer

The device gracefully transitions the active state to the standby device.. A soft shutdown allows the active unit to relinquish its role gracefully to the standby unit.

Answer

The device disables all interfaces without notifying the peer.

Answer

The device immediately reboots.

Answer

The device enters a maintenance mode that clears all routes.

Question 12

In a multi-homed DCI scenario, you are seeing asymmetric routing. What is the most likely cause within the OMP domain?

Accepted Answer

The TLOC preference is higher on one of the exit points, causing traffic to prefer that path for return.. Asymmetry occurs when the return path preference differs from the forward path due to OMP path attribute configurations.

Answer

The MTU size is different on the DCI interfaces.

Answer

The site IDs are identical.

Answer

BFD is disabled on one of the links.

Question 13

When DCI links are used to extend Layer 2, what must you ensure is configured to prevent broadcast storms?

Accepted Answer

STP or a loop prevention mechanism on the bridged interfaces.. L2 extension requires loop prevention mechanisms like BPDU guard or storm control.

Answer

Set all interfaces to 'trunk' mode.

Answer

Increase the MTU size.

Answer

Disable OMP for the L2 interfaces.

Question 14

Which THREE actions occur when a device transitions to 'Active' status in an HA pair?

Accepted Answer

The device restarts its BFD sessions.. The transition triggers BFD, OMP advertisement, and interface reactivation.

Answer

The device initiates a factory reset.

Answer

The device purges all log history.

Question 15

A network architect is designing a branch site deployment requiring sub-second failover. Which Prisma SD-WAN component must be configured to prioritize real-time traffic across multiple transport paths based on path quality metrics?

Accepted Answer

Performance Routing (PFR) Policy. Performance Routing (PFR) policies are configured to monitor path quality and dynamically steer traffic.

Answer

Traffic Policing Rule

Answer

NAT Control Policy

Answer

Access Control List (ACL)

Question 16

Which THREE OMP attributes can be used to influence path selection for DCI?

Accepted Answer

TLOC Preference.. TLOC preference, OMP cost, and OMP tag are standard attributes for path manipulation.

Answer

System IP.

Answer

Device Serial Number.

Question 17

A customer wants to deploy a Hub-and-Spoke model with redundant hubs. What must be configured to ensure seamless transition if the primary hub fails?

Accepted Answer

Hub Priority and Failover settings. Configuring redundant hubs in the controller allows the spokes to fail over to the secondary hub automatically.

Answer

IPsec Key Exchange

Answer

Static Route redistribution

Answer

BGP Multi-homing

Question 18

Which command or interface path is used to verify the status of the SD-WAN tunnel between two branch sites?

Accepted Answer

Controller > Monitoring > Tunnels. The Dashboard or the 'show' commands in the CLI allow for tunnel status verification.

Answer

Configuration > Sites > WAN Interfaces

Answer

Policies > Security > Rules

Answer

Network > Routing > BGP

Question 19

Which TWO features are included in the vManage 'Monitor' menu?

Accepted Answer

Device health and status.. The Monitor menu is the central hub for observing the SD-WAN fabric performance.

Answer

User management.

Answer

Policy configuration.

Answer

Software image repository.

Question 20

You are configuring a branch site with a dual-ISP setup. What is the correct order of operations for defining transport interfaces?

Accepted Answer

Configure IP, then assign interface to a WAN transport type. Interfaces must be defined in the inventory, then assigned as transport in the site configuration.

Answer

Enable IPSec, then configure interface

Answer

Enable BGP, then configure WAN interface

Answer

Assign WAN interface to Transport group, then define IP