SD-WAN-Engineer Practice Test 5 — 25 Questions

Question 1

Which TWO components are essential for maintaining the SD-WAN control plane?

Accepted Answer

Controller. The control plane relies on the Controller and the secure communication between the Controller and the ION devices.

Answer

Physical cable length

Answer

Local switch ports

Answer

CloudBlades API key

Question 2

A branch office uses both MPLS and Broadband. The design requires that business-critical traffic prefers MPLS, failing over to Broadband only if the MPLS path experiences packet loss exceeding 1%. Which metric should the PFR policy utilize?

Accepted Answer

Packet Loss. Performance Routing policies rely on path metrics like loss, latency, and jitter to make routing decisions.

Answer

Bandwidth Utilization

Answer

Jitter

Answer

Round Trip Time (RTT)

Question 3

What is the role of the 'Service Connection' in the Prisma SD-WAN interface?

Accepted Answer

To define the tunnel parameters for Prisma Access integration. A Service Connection is a logical construct that maps traffic from the SD-WAN fabric to external services like Prisma Access.

Answer

To monitor bandwidth usage

Answer

To configure a firewall rule

Answer

To manage branch-to-branch routing

Question 4

Which dashboard component in vManage provides an 'at-a-glance' health score for the entire SD-WAN fabric?

Accepted Answer

Network Health Dashboard.. The Network Health dashboard provides an aggregated score based on various site and device metrics.

Answer

Application Health.

Answer

Control Connections.

Answer

Interface Usage.

Question 5

What is the purpose of the 'site-id' in the Prisma SD-WAN branch configuration?

Accepted Answer

To uniquely identify the site within the fabric. The site-id is a unique identifier used to manage and reference the site within the SD-WAN fabric.

Answer

To define the management VLAN

Answer

To configure the local gateway IP

Answer

To identify the physical location on a map

Question 6

When troubleshooting QoS, what does a high 'drop' count in the interface statistics imply?

Accepted Answer

Interface congestion. High drop counts indicate that the interface is congested and exceeding the configured bandwidth limit.

Answer

Hardware failure

Answer

Security policy blocking

Answer

The ISP is down

Question 7

A branch is failing to load-balance traffic across two ISPs. Both are active. Which setting controls the load-balancing algorithm?

Accepted Answer

Path Selection Policy. The Path Selection policy defines how traffic is distributed across available paths.

Answer

NAT Policy

Answer

Interface Bandwidth Settings

Answer

QoS Policy

Question 8

Which of the following is a benefit of a Unified SASE architecture?

Accepted Answer

Unified management and consistent policy enforcement. Unified SASE combines networking (SD-WAN) and security (SASE) into a single management plane, simplifying operations.

Answer

Total replacement of physical branch routers

Answer

Removal of the need for internet connectivity

Answer

Increased hardware complexity at the branch

Question 9

A branch office requires local breakout for SaaS traffic. How do you configure the policy to ensure this traffic does not traverse the data center?

Accepted Answer

Configure a destination-based policy with a Local Breakout action. The destination-based policy for direct internet access (DIA) ensures local traffic exits locally.

Answer

Set the VRF to global

Answer

Apply a hub-and-spoke routing policy

Answer

Enable NAT on the WAN interface

Question 10

When configuring Data Center Interconnect (DCI) between two sites, you notice that routing loops are occurring. What is the most effective way to prevent this in a dual-homed DCI scenario?

Accepted Answer

Implement Site-of-Origin (SoO) extended communities on the DCI links.. Setting appropriate OMP administrative distances or using site-of-origin tags prevents routing loops in DCI.

Answer

Disable OMP on the DCI interface.

Answer

Increase the OMP cost on all routes.

Answer

Configure a static route to the peer site.

Question 11

Which dashboard provides the most detailed information regarding the health of individual tunnels within an SD-WAN fabric?

Accepted Answer

Tunnel Health Dashboard.. The Tunnel Health dashboard is designed specifically to aggregate and report on tunnel performance metrics.

Answer

Device Health.

Answer

Application Health.

Answer

System Health.

Question 12

When analyzing a PCAP from an ION device, you see 'ICMP Destination Unreachable'. Which policy is most likely causing this?

Accepted Answer

Security Policy. Security policies or access control lists (ACLs) blocking traffic will trigger ICMP unreachable messages.

Answer

NAT Policy

Answer

QoS Policy

Answer

Path Selection Policy

Question 13

What is the purpose of 'Bandwidth Groups' in Prisma SD-WAN?

Accepted Answer

To manage aggregated capacity for path policies. Bandwidth groups aggregate multiple WAN links to manage total capacity and policy-based steering as a single logical pipe.

Answer

To set the time zone

Answer

To define VLANs

Answer

To limit internal file transfers

Question 14

You need to ensure that traffic from a specific subnet is placed into a unique VRF. How is this achieved?

Accepted Answer

By assigning the interface to the desired VRF. VRF assignment is mapped to local segments or subnets at the interface configuration level.

Answer

By rebooting the device

Answer

By setting a firewall rule

Answer

By modifying the global routing table

Question 15

How does Prisma SD-WAN handle DNS queries for branch users?

Accepted Answer

It can intercept and proxy DNS requests. Prisma SD-WAN can act as a DNS proxy or forwarder to improve efficiency.

Answer

It ignores DNS traffic

Answer

It blocks all DNS queries

Answer

It forces all DNS to public servers

Question 16

When configuring an ION device as a gateway for a cloud environment, what is the primary role of a 'Service' interface?

Accepted Answer

To provide connectivity to LAN-side services or segments. Service interfaces are designated for specific traffic flows or service chains within the SD-WAN fabric.

Answer

To provide management access

Answer

To update firmware

Answer

To connect to the ISP modem

Question 17

A customer wants to prioritize Office 365 traffic over general web traffic. What is the most efficient way to achieve this?

Accepted Answer

Create an application-aware policy. Using an application-based policy allows for granular control over Office 365 specifically.

Answer

Manually route all traffic to a specific ISP

Answer

Set a global rate limit

Answer

Configure port-based QoS

Question 18

Where do you check the status of active control connections in vManage?

Accepted Answer

Monitor > Network > [Device] > Control Connections.. Monitor > Network > Select Device > Control > Connections.

Answer

Administration > Maintenance.

Answer

Configuration > Policies > Security.

Answer

Tools > Network.

Question 19

You are designing an SD-WAN path for a high-bandwidth application that is sensitive to out-of-order packets. Which configuration setting minimizes packet reordering in a multi-path environment?

Accepted Answer

Flow-based load balancing. Enabling session affinity or path steering policies that restrict traffic to a single path avoids reordering issues common in multi-path load balancing.

Answer

Jitter Buffer increase

Answer

Aggressive TCP acceleration

Answer

Packet-based load balancing

Question 20

How does a 'Failover' policy differ from a 'Load Balancing' policy in Prisma SD-WAN?

Accepted Answer

Failover uses only one link at a time. Failover is reactive to link loss, while load balancing distributes traffic across links simultaneously.

Answer

Load balancing only works on LAN

Answer

Load balancing is not supported

Answer

Failover requires more bandwidth