SD-WAN-Engineer Practice Test 1 — 30 Questions

Question 1

You need to restrict administrative access to the ION device. Where is this configured?

Accepted Answer

Device Configuration / Access Control. Management access policies are defined under the device configuration settings in the Controller.

Answer

In the routing table

Answer

In the CloudBlades menu

Answer

On the WAN interface

Question 2

You need to ensure that specific branch traffic is encrypted over a public internet link. Which configuration step is mandatory?

Accepted Answer

Enable Auto-VPN on the WAN interface. VPN tunnels are established automatically between ION devices when policies are defined, but the path must be categorized to allow tunnel formation.

Answer

Manually configure IPsec parameters

Answer

Disable firewall policies

Answer

Configure a static route to the peer

Question 3

When deploying a new ION device, which Prisma SD-WAN component is primarily used to initiate the zero-touch provisioning process?

Accepted Answer

Controller. The ION device reaches out to the Controller during the initial bootstrap process to pull its configuration and firmware.

Answer

Prisma Access

Answer

CloudBlades

Answer

Prisma SD-WAN Plugin

Question 4

When setting up a branch site, what is the purpose of the 'Underlay' configuration?

Accepted Answer

To configure the ISP circuit details. Underlay configuration defines the physical WAN circuit parameters (ISP, bandwidth, etc.) for the SD-WAN tunnel overlay.

Answer

To define the routing protocol

Answer

To manage internal LAN switches

Answer

To configure DHCP

Question 5

Where are the primary SD-WAN routing policies defined?

Accepted Answer

Within the Controller policy engine. Policies are defined centrally in the Controller and pushed to the edge devices.

Answer

Locally on the ION device CLI

Answer

On the ISP router

Answer

In the local DHCP server

Question 6

Which THREE types of traffic are commonly categorized for specific QoS treatment?

Accepted Answer

Mission-critical database traffic. QoS focuses on real-time and business-critical traffic.

Answer

Public guest Wi-Fi browsing

Answer

Idle background system updates

Question 7

Which menu path is used to view the real-time tunnel statistics for a specific vEdge router?

Accepted Answer

Monitor > Network > [Device] > Tunnel.. Monitor > Network allows you to select a specific device and view its tunnel performance.

Answer

Administration > Settings.

Answer

Tools > Real-time monitoring.

Answer

Configuration > Devices.

Question 8

When DCI is implemented via an L3VPN overlay, which OMP attribute is most critical to ensure traffic prefers the direct link over the DCI link for reaching local subnets?

Accepted Answer

TLOC Preference.. OMP TLOC preference is used to influence path selection across different transports and links.

Answer

Color.

Answer

Site ID.

Answer

OMP Tag.

Question 9

What is the primary function of the 'Controller' dashboard in the Prisma SD-WAN UI?

Accepted Answer

To provide visibility into fabric health and status. The dashboard provides a high-level view of health, status, and traffic analytics.

Answer

To configure individual PC settings

Answer

To update user passwords

Answer

To manage ISP billing

Question 10

When configuring 'NAT', what is the difference between 'Source NAT' and 'Destination NAT'?

Accepted Answer

Source NAT hides internal IPs; Destination NAT directs inbound traffic. Source NAT modifies the source IP for outbound traffic; Destination NAT modifies the destination IP for inbound traffic.

Answer

Destination NAT hides internal IPs

Answer

Only Source NAT is supported

Answer

They are the same

Question 11

Which TWO methods can be used to identify traffic for a policy?

Accepted Answer

Source/Destination IP addresses. Traffic can be identified by application or by IP/port-based rules.

Answer

Router model

Answer

Device serial number

Answer

Physical port location

Question 12

Which THREE settings are typically defined during the initial ION site provisioning?

Accepted Answer

WAN interface settings. Provisioning involves setting up basic connectivity, identifying the site, and assigning basic policies.

Answer

Annual maintenance schedule

Answer

Global DNS server settings

Question 13

You are troubleshooting a performance issue where traffic is not taking the preferred path. Which tool in the Controller helps you visualize the path taken?

Accepted Answer

Flow Monitoring. The path visualization tool displays the real-time path selected by the SD-WAN engine.

Answer

Interface counters

Answer

System Logs

Answer

Packet Capture

Question 14

If a user at a branch site reports that they cannot access a specific internal server, which diagnostic tool should you use first?

Accepted Answer

Review Flow Monitoring logs. Flow monitoring allows you to see if traffic is hitting the expected policy and where it is being dropped or steered.

Answer

Check the cloud status page

Answer

Check physical cables

Answer

Reboot the ION

Question 15

Which TWO factors are used by Prisma SD-WAN to determine the health of a WAN path?

Accepted Answer

Packet loss. The SD-WAN engine monitors latency and loss to calculate path quality.

Answer

Physical cable color

Answer

Power supply status

Answer

ISP name

Question 16

Which THREE actions can be performed by a Prisma SD-WAN 'Policy' object?

Accepted Answer

Path selection. Policies can steer traffic, prioritize it, or apply security constraints.

Answer

Hardware replacement

Answer

Firmware updates

Question 17

When integrating Prisma SD-WAN with a cloud-based security service provider (CSSP) via CloudBlades, which setting must be verified to ensure proper traffic redirection?

Accepted Answer

Service-to-Tunnel Mapping. The service mapping in CloudBlades ensures that traffic classified for security inspection is steered to the correct CSSP node.

Answer

Local ISP DNS settings

Answer

DHCP Server scope

Answer

VLAN ID matching

Question 18

When planning for a large-scale deployment, which items are required for the initial site information gather? (Choose THREE)

Accepted Answer

Total bandwidth per link. Knowing local WAN IPs, LAN subnets, and bandwidth requirements is essential for design.

Answer

Local desk configurations

Answer

Employee names

Question 19

What is the primary benefit of enabling 'Forward Error Correction' (FEC) on a high-latency WAN link?

Accepted Answer

It improves performance for jitter-sensitive traffic. FEC adds redundant data to packets, allowing the receiver to reconstruct lost packets without retransmission.

Answer

It bypasses the firewall

Answer

It replaces the need for QoS

Answer

It reduces total bandwidth usage

Question 20

When configuring a security policy, what is the purpose of an 'Application' object?

Accepted Answer

To identify traffic by application signatures rather than just ports. Application objects identify traffic by signature, allowing for specific policy control.

Answer

To set the bandwidth limit

Answer

To define the physical interface

Answer

To define the user identity