SD-WAN-Engineer Practice Questions 2 — 50 Questions

Question 1

To ensure high availability, you are implementing Active-Active gateway deployment at a large branch. What is required for this to work correctly?

Accepted Answer

A dedicated Layer 2 heart-beat link between gateways. Active-Active deployment requires synchronization between the gateways, typically via a heartbeat link.

Answer

A separate management network

Answer

Separate WAN links for each gateway

Answer

Static IP addresses on all interfaces

Question 2

A site has two ISPs. Traffic is only using one. What is the best way to verify if both paths are available?

Accepted Answer

Check Path Quality dashboard. The Path Quality dashboard displays the health status of all defined paths.

Answer

Ping from the LAN

Answer

Review firewall rules

Answer

Check the BGP summary

Question 3

You are verifying the status of a Service Connection between a branch ION and Prisma Access. Which command or dashboard view provides the most accurate status of the tunnel reachability?

Accepted Answer

The Controller Service Connection Status Dashboard. The Prisma SD-WAN Controller dashboard provides a clear Service Connection status widget that shows tunnel up/down state.

Answer

The ION device hardware health tab

Answer

The local device ARP table

Answer

The cloud provider logs

Question 4

A site deployment requires specific traffic to be exempted from the SD-WAN optimization process to ensure compatibility with a legacy application. Which policy should be updated?

Accepted Answer

Application Policy. Application Policy rules allow you to specify traffic types that should bypass optimization.

Answer

NAT Policy

Answer

Security Policy

Answer

Interface Policy

Question 5

You want to audit who changed a policy on the Controller. Where is this information logged?

Accepted Answer

Controller Audit Logs. The Audit logs record all administrative actions, including policy changes.

Answer

Performance Monitoring

Answer

Security Policy Hits

Answer

System Event Logs

Question 6

Which criteria can be used to steer traffic in a Performance Routing policy? (Choose TWO)

Accepted Answer

Packet Loss. Latency and packet loss are key metrics used to determine the best path in PFR.

Answer

Time of day

Answer

Device serial number

Answer

User's physical weight

Question 7

Where do you view the history of configuration changes pushed to an ION device?

Accepted Answer

Audit Logs. The audit log records all configuration modifications and administrative actions.

Answer

Error Reports

Answer

Event Viewer

Answer

System Logs

Question 8

Which are valid methods to connect a branch to the SD-WAN fabric? (Choose TWO)

Accepted Answer

Virtual Gateway (vGateway). Using a dedicated SD-WAN appliance or a virtual gateway are both supported methods.

Answer

A simple hub

Answer

A standard home router without SD-WAN software

Answer

A physical bridge only

Question 9

Which log is used to view denied traffic attempts?

Accepted Answer

Security Logs. Security logs capture events related to security policies, including denies.

Answer

Flow Logs

Answer

Audit Logs

Answer

System Logs

Question 10

Which dashboard is most useful for identifying top bandwidth consumers in the network?

Accepted Answer

Application/Flow Monitoring. The App/Flow dashboard identifies top applications and users by bandwidth.

Answer

Path Quality

Answer

System Health

Answer

Security Events

Question 11

Which TWO metrics are displayed in the Path Quality dashboard?

Accepted Answer

Latency. The dashboard displays jitter and latency as key performance indicators.

Answer

Total number of users

Answer

Fan speed

Answer

Power supply voltage

Question 12

In the context of the SD-WAN Controller, what does the 'Template' object represent?

Accepted Answer

A reusable configuration baseline. A template is a reusable configuration set applied to multiple gateways to ensure consistency.

Answer

A single device configuration file

Answer

A firmware update package

Answer

A hardware specification sheet

Question 13

Which of the following are valid transport types that can be defined in a Prisma SD-WAN site configuration? (Choose TWO)

Accepted Answer

MPLS. Public Internet and MPLS are standard transport categories in the SD-WAN policy engine.

Answer

Bluetooth

Answer

Fiber Optic

Answer

Serial

Question 14

Which types of traffic should ideally be prioritized via QoS policies? (Choose TWO)

Accepted Answer

Real-time video conferencing. Voice and real-time video are high-priority, latency-sensitive traffic types.

Answer

Background system backups

Answer

Operating system updates

Answer

Social media browsing

Question 15

You need to allow direct internet access for SaaS applications from the branch site. What is the correct term for this configuration?

Accepted Answer

Direct Internet Access (DIA). Local Internet Breakout (LIB) is the feature that allows traffic to bypass the hub and go directly to the internet.

Answer

VPN Bypass

Answer

Backhaul Traffic

Answer

Hub-Exit

Question 16

Which of the following are components of the Prisma SD-WAN Controller interface? (Choose TWO)

Accepted Answer

Dashboard. The dashboard and the monitoring sections are standard components of the Controller GUI.

Answer

Internet Speed Test

Answer

Hardware installation manual

Answer

Physical server room temperature

Question 17

When implementing a CloudBlade for a cloud security service, what must be configured? (Choose THREE)

Accepted Answer

Automated tunnel configuration. Service integration, tunnel creation, and policy steering are all part of CloudBlade implementation.

Answer

Hardware reboot schedule

Answer

Local printer settings

Question 18

You notice an ION device is showing as 'Disconnected' in the Controller UI. What is the first step you should take?

Accepted Answer

Check physical interface status and WAN connectivity. Verifying WAN connectivity and local interface status is the logical first step in troubleshooting connectivity.

Answer

Upgrade the device firmware

Answer

Reboot the ION device

Answer

Delete and recreate the site

Question 19

Which aspects of a site's network are required for configuring the SD-WAN Controller? (Choose TWO)

Accepted Answer

Management IP address. Knowing the LAN subnets and the gateway's management IP is essential for configuration.

Answer

The name of the branch manager

Answer

The office zip code

Answer

The color of the Ethernet cables

Question 20

When troubleshooting a site-to-site VPN issue between two ION devices, which status should you check first?

Accepted Answer

VPN Tunnel Status in the Orchestrator. The tunnel status in the orchestrator reveals if the overlay tunnel is up.

Answer

NTP synchronization

Answer

ISP routing table

Answer

BIOS settings