SD-WAN-Engineer Practice Test 3 — 30 Questions

Question 1

Which TWO metrics are displayed in the Path Quality dashboard?

Accepted Answer

Latency. The dashboard displays jitter and latency as key performance indicators.

Answer

Total number of users

Answer

Fan speed

Answer

Power supply voltage

Question 2

In the context of the SD-WAN Controller, what does the 'Template' object represent?

Accepted Answer

A reusable configuration baseline. A template is a reusable configuration set applied to multiple gateways to ensure consistency.

Answer

A single device configuration file

Answer

A firmware update package

Answer

A hardware specification sheet

Question 3

Which of the following are valid transport types that can be defined in a Prisma SD-WAN site configuration? (Choose TWO)

Accepted Answer

MPLS. Public Internet and MPLS are standard transport categories in the SD-WAN policy engine.

Answer

Bluetooth

Answer

Fiber Optic

Answer

Serial

Question 4

Which types of traffic should ideally be prioritized via QoS policies? (Choose TWO)

Accepted Answer

Real-time video conferencing. Voice and real-time video are high-priority, latency-sensitive traffic types.

Answer

Background system backups

Answer

Operating system updates

Answer

Social media browsing

Question 5

You need to allow direct internet access for SaaS applications from the branch site. What is the correct term for this configuration?

Accepted Answer

Direct Internet Access (DIA). Local Internet Breakout (LIB) is the feature that allows traffic to bypass the hub and go directly to the internet.

Answer

VPN Bypass

Answer

Backhaul Traffic

Answer

Hub-Exit

Question 6

Which of the following are components of the Prisma SD-WAN Controller interface? (Choose TWO)

Accepted Answer

Dashboard. The dashboard and the monitoring sections are standard components of the Controller GUI.

Answer

Internet Speed Test

Answer

Hardware installation manual

Answer

Physical server room temperature

Question 7

When implementing a CloudBlade for a cloud security service, what must be configured? (Choose THREE)

Accepted Answer

Automated tunnel configuration. Service integration, tunnel creation, and policy steering are all part of CloudBlade implementation.

Answer

Hardware reboot schedule

Answer

Local printer settings

Question 8

You notice an ION device is showing as 'Disconnected' in the Controller UI. What is the first step you should take?

Accepted Answer

Check physical interface status and WAN connectivity. Verifying WAN connectivity and local interface status is the logical first step in troubleshooting connectivity.

Answer

Upgrade the device firmware

Answer

Reboot the ION device

Answer

Delete and recreate the site

Question 9

Which aspects of a site's network are required for configuring the SD-WAN Controller? (Choose TWO)

Accepted Answer

Management IP address. Knowing the LAN subnets and the gateway's management IP is essential for configuration.

Answer

The name of the branch manager

Answer

The office zip code

Answer

The color of the Ethernet cables

Question 10

When troubleshooting a site-to-site VPN issue between two ION devices, which status should you check first?

Accepted Answer

VPN Tunnel Status in the Orchestrator. The tunnel status in the orchestrator reveals if the overlay tunnel is up.

Answer

NTP synchronization

Answer

ISP routing table

Answer

BIOS settings

Question 11

Which TWO items are checked by the ION device to determine if a WAN path is healthy?

Accepted Answer

Packet loss. The path health engine evaluates both packet loss and latency/jitter.

Answer

Device temperature

Answer

User authentication status

Answer

Local disk space

Question 12

Which THREE pieces of information are critical when opening a support ticket for a suspected SD-WAN bug?

Accepted Answer

Support bundle/logs. Technical support requires device logs, packet captures, and a clear description of the issue.

Answer

Internal employee names

Answer

User passwords

Question 13

A user reports that a specific SaaS application is being blocked, but no security policy matches are seen. What is the most likely cause?

Accepted Answer

Implicit Deny policy. If no policy match is found, the traffic may be hitting the default implicit deny or is being blocked by a local device policy.

Answer

Memory exhaustion

Answer

Encryption mismatch

Answer

BGP path selection error

Question 14

What information is provided by the 'Controller Status' widget on the dashboard?

Accepted Answer

Connectivity between ION and Controller. It confirms the connectivity status between the ION and the controller.

Answer

LAN port status

Answer

Site-to-site VPN health

Answer

ISP latency

Question 15

Which TWO actions can resolve persistent high latency on a path?

Accepted Answer

Adjust QoS bandwidth limits. Configuring path selection policies to avoid the path or adjusting QoS settings can mitigate the impact of high latency.

Answer

Delete all VLANs

Answer

Change the device hostname

Answer

Increase the MTU size

Question 16

You are monitoring traffic in a Unified SASE environment. You notice that traffic from a branch is taking a non-optimal path to Prisma Access. Which tool would you use to verify the path selection logic?

Accepted Answer

The flow diagnostic tool on the SD-WAN controller. The flow diagnostic tool on the SD-WAN controller provides visibility into the path selection decisions.

Answer

The WAN interface stats

Answer

The ION device ping tool

Answer

The Prisma Access logs

Question 17

Which protocol is primarily used for the tunnel between the ION device and the Prisma Access Service Infrastructure?

Accepted Answer

IPSec. IPSec is the standard protocol for creating secure tunnels between SD-WAN devices and cloud service infrastructure.

Answer

SSL

Answer

GRE

Answer

MPLS

Question 18

A user is complaining about high latency for a SaaS app. The Path Quality dashboard shows low latency. What is the next logical step?

Accepted Answer

Check LAN-side connectivity and local congestion. If the WAN path is healthy, the latency might be internal to the LAN or at the application server level.

Answer

Enable more security policies

Answer

Change ISP provider

Answer

Restart the ION device

Question 19

What is the function of the 'Reachability' check in the ION device configuration?

Accepted Answer

To verify ISP link status. It tests if the path is actually capable of reaching the destination, confirming path health.

Answer

To update firmware

Answer

To backup configuration

Answer

To check CPU load

Question 20

Which THREE factors can cause a site to go into 'Disconnected' state in the orchestrator?

Accepted Answer

Controller certificate mismatch. Loss of internet, controller reachability issues, and incorrect time settings are common causes.

Answer

High CPU load

Answer

Local VLAN misconfiguration