SD-WAN-Engineer Practice Test 9 — 10 Questions

Question 1

Which TWO tools are available in the ION CLI for network connectivity testing?

Accepted Answer

traceroute. ping and traceroute are the standard tools available in the ION CLI.

Answer

wireshark

Answer

telnet

Answer

nmap

Question 2

What does the 'Flow Monitor' tool primarily track?

Accepted Answer

Active sessions and traffic attributes. The Flow Monitor provides granular details on active traffic sessions.

Answer

Controller connection time

Answer

ISP bandwidth limits

Answer

CPU utilization

Question 3

A user reports slow speeds. You see that the interface is not hitting the configured throughput limit. What could be the issue?

Accepted Answer

ISP side congestion. If the interface is not the bottleneck, the bottleneck may exist further upstream in the ISP network.

Answer

QoS priority too high

Answer

Incorrect IP address

Answer

Too many VLANs

Question 4

An organization is migrating to Unified SASE. When configuring the 'Direct to App' policy for branch offices, what is the primary benefit of leveraging the Prisma SD-WAN integration with Prisma Access?

Accepted Answer

It provides unified visibility and automated steering based on security requirements. The integration allows for dynamic path selection and security enforcement, ensuring that traffic is sent directly to the app when possible, or via Prisma Access when security inspection is required.

Answer

It allows the ION device to run full security stack analysis locally

Answer

It eliminates the need for DNS

Answer

It bypasses the need for WAN optimization

Question 5

When defining an Application Steering Policy in a Unified SASE environment, what is the advantage of using 'Application Groups'?

Accepted Answer

They enable consistent policy application across multiple applications. Application groups allow for policy abstraction, so multiple apps can be steered using a single policy definition.

Answer

They are required for local internet breakout

Answer

They reduce the amount of bandwidth consumed

Answer

They bypass the security inspection

Question 6

Which TWO of these are valid ways to verify the status of an ION device's WAN interface?

Accepted Answer

Check the Interface dashboard in the orchestrator. Checking the UI interface dashboard and using the CLI 'show interface' command are both standard verification methods.

Answer

Review the BIOS logs

Answer

Ping the device from the internet

Answer

Check the DNS logs

Question 7

Which THREE areas of configuration should you verify if a site cannot reach the local LAN gateway?

Accepted Answer

Interface IP/Mask. Interface settings, VLAN tagging, and ARP resolution are critical for local LAN communication.

Answer

Application security policy

Answer

Controller tunnel status

Question 8

What is the primary function of the 'Cloud Identity Engine' in the Unified SASE architecture?

Accepted Answer

To act as a central identity source for security policies. CIE centralizes identity across all SASE components, enabling consistent user-based policies.

Answer

To accelerate SaaS application traffic

Answer

To manage SD-WAN tunnel keys

Answer

To store traffic logs

Question 9

When using a Service Connection, what happens if the Prisma Access node is unreachable?

Accepted Answer

The system falls back to the configured backup path. The SD-WAN policy will trigger a failover action based on the configured policy, such as direct internet breakout or alternate tunnel.

Answer

The user is forced to re-authenticate

Answer

The ION device restarts

Answer

The traffic is dropped

Question 10

A branch loses connectivity to the internet, but local LAN traffic is fine. What should you troubleshoot first?

Accepted Answer

ISP connection and WAN interface. If local traffic works, the LAN is fine. The focus should be on the WAN edge.

Answer

Device power supply

Answer

DHCP server settings

Answer

Core Switch configuration