SD-WAN-Engineer Practice Exam 3 — 20 Questions

Question 1

Which factors should be considered when designing the placement of a regional hub in a Prisma SD-WAN architecture? (Choose TWO)

Accepted Answer

Latency to branch locations. Latency to branch sites and proximity to data centers are critical for hub design.

Answer

The ISP's billing cycle

Answer

The color of the hardware

Answer

The number of local users

Question 2

You are debugging a routing loop. Which tool can you use to see the BGP route advertisements received by an ION device?

Accepted Answer

Route Monitoring. The BGP neighbor status and route tables in the device monitoring show learned routes.

Answer

Path Quality

Answer

Flow Summary

Answer

Interface Stats

Question 3

You have configured two different DCI paths. You want to load balance traffic across both paths. What OMP configuration must be set?

Accepted Answer

Ensure TLOC preference and OMP costs are identical on both paths.. Equal cost multi-path (ECMP) requires identical OMP attributes.

Answer

Disable BFD on both paths.

Answer

Configure a unique site ID for each path.

Answer

Set the OMP administrative distance to 1.

Question 4

Which protocol is utilized for the auto-discovery of Prisma SD-WAN Gateways during site provisioning?

Accepted Answer

ZTP (Zero Touch Provisioning). The Zero-Touch Provisioning (ZTP) process uses the controller to push configurations after the gateway registers via the secure cloud portal.

Answer

SNMP

Answer

RIPv2

Answer

TFTP

Question 5

A company is migrating to a cloud-native architecture. How does Prisma SD-WAN support multi-cloud connectivity?

Accepted Answer

Virtual Gateways (vGateways). Through CloudBlades and virtual gateways (vGateways) deployed in public cloud VPCs/VNets.

Answer

Manual BGP peering with ISPs

Answer

Physical site-to-site VPNs only

Answer

Cloud-only routing protocols

Question 6

What is the primary function of the CloudBlades platform in the Prisma SD-WAN architecture?

Accepted Answer

API-based service integration. CloudBlades is the API integration platform that allows for seamless integration with third-party cloud services.

Answer

Encryption key rotation

Answer

Hardware acceleration

Answer

Local breakout management

Question 7

Which Prisma SD-WAN interface is used to connect to the local LAN?

Accepted Answer

LAN Interface. The LAN-side interface connects to switches, servers, and internal users.

Answer

Tunnel Interface

Answer

Management Interface

Answer

WAN Interface

Question 8

What are the primary benefits of implementing a hub-and-spoke design with Prisma SD-WAN? (Choose THREE)

Accepted Answer

Simplified management and visibility. Centralized security, easier management, and traffic grooming are benefits of hub-and-spoke.

Answer

Hardware-less branch deployments

Answer

Infinite bandwidth at the branch

Question 9

Which of these tasks are part of the pre-deployment planning phase for Prisma SD-WAN? (Choose TWO)

Accepted Answer

Validating WAN link connectivity. Assessing current bandwidth usage and identifying critical applications are vital first steps.

Answer

Negotiating new ISP contracts

Answer

Updating the firmware on end-user laptops

Answer

Painting the office walls

Question 10

A customer requires a granular segmentation strategy where HR, Engineering, and Guest traffic must remain isolated across the SD-WAN fabric. Which configuration construct provides this logical separation?

Accepted Answer

Virtual Networks (VNets). Virtual Networks (VNets) allow for the logical segmentation of traffic throughout the fabric.

Answer

IPsec Tunnel Groups

Answer

Subnet Masking

Answer

VLAN Tagging

Question 11

To ensure high availability, you are implementing Active-Active gateway deployment at a large branch. What is required for this to work correctly?

Accepted Answer

A dedicated Layer 2 heart-beat link between gateways. Active-Active deployment requires synchronization between the gateways, typically via a heartbeat link.

Answer

A separate management network

Answer

Separate WAN links for each gateway

Answer

Static IP addresses on all interfaces

Question 12

A site has two ISPs. Traffic is only using one. What is the best way to verify if both paths are available?

Accepted Answer

Check Path Quality dashboard. The Path Quality dashboard displays the health status of all defined paths.

Answer

Ping from the LAN

Answer

Review firewall rules

Answer

Check the BGP summary

Question 13

You are verifying the status of a Service Connection between a branch ION and Prisma Access. Which command or dashboard view provides the most accurate status of the tunnel reachability?

Accepted Answer

The Controller Service Connection Status Dashboard. The Prisma SD-WAN Controller dashboard provides a clear Service Connection status widget that shows tunnel up/down state.

Answer

The ION device hardware health tab

Answer

The local device ARP table

Answer

The cloud provider logs

Question 14

A site deployment requires specific traffic to be exempted from the SD-WAN optimization process to ensure compatibility with a legacy application. Which policy should be updated?

Accepted Answer

Application Policy. Application Policy rules allow you to specify traffic types that should bypass optimization.

Answer

NAT Policy

Answer

Security Policy

Answer

Interface Policy

Question 15

You want to audit who changed a policy on the Controller. Where is this information logged?

Accepted Answer

Controller Audit Logs. The Audit logs record all administrative actions, including policy changes.

Answer

Performance Monitoring

Answer

Security Policy Hits

Answer

System Event Logs

Question 16

Which criteria can be used to steer traffic in a Performance Routing policy? (Choose TWO)

Accepted Answer

Packet Loss. Latency and packet loss are key metrics used to determine the best path in PFR.

Answer

Time of day

Answer

Device serial number

Answer

User's physical weight

Question 17

Where do you view the history of configuration changes pushed to an ION device?

Accepted Answer

Audit Logs. The audit log records all configuration modifications and administrative actions.

Answer

Error Reports

Answer

Event Viewer

Answer

System Logs

Question 18

Which are valid methods to connect a branch to the SD-WAN fabric? (Choose TWO)

Accepted Answer

Virtual Gateway (vGateway). Using a dedicated SD-WAN appliance or a virtual gateway are both supported methods.

Answer

A simple hub

Answer

A standard home router without SD-WAN software

Answer

A physical bridge only

Question 19

Which log is used to view denied traffic attempts?

Accepted Answer

Security Logs. Security logs capture events related to security policies, including denies.

Answer

Flow Logs

Answer

Audit Logs

Answer

System Logs

Question 20

Which dashboard is most useful for identifying top bandwidth consumers in the network?

Accepted Answer

Application/Flow Monitoring. The App/Flow dashboard identifies top applications and users by bandwidth.

Answer

Path Quality

Answer

System Health

Answer

Security Events