SD-WAN-Engineer Deployment And Configuration Practice Test 2 — 15 Questions

Question 1

You need to restrict administrative access to the ION device. Where is this configured?

Accepted Answer

Device Configuration / Access Control. Management access policies are defined under the device configuration settings in the Controller.

Answer

In the routing table

Answer

In the CloudBlades menu

Answer

On the WAN interface

Question 2

You are troubleshooting a performance issue where traffic is not taking the preferred path. Which tool in the Controller helps you visualize the path taken?

Accepted Answer

Flow Monitoring. The path visualization tool displays the real-time path selected by the SD-WAN engine.

Answer

Interface counters

Answer

System Logs

Answer

Packet Capture

Question 3

How does Prisma SD-WAN handle DNS queries for branch users?

Accepted Answer

It can intercept and proxy DNS requests. Prisma SD-WAN can act as a DNS proxy or forwarder to improve efficiency.

Answer

It ignores DNS traffic

Answer

It blocks all DNS queries

Answer

It forces all DNS to public servers

Question 4

Where are the primary SD-WAN routing policies defined?

Accepted Answer

Within the Controller policy engine. Policies are defined centrally in the Controller and pushed to the edge devices.

Answer

Locally on the ION device CLI

Answer

On the ISP router

Answer

In the local DHCP server

Question 5

What is the purpose of 'Bandwidth Groups' in Prisma SD-WAN?

Accepted Answer

To manage aggregated capacity for path policies. Bandwidth groups aggregate multiple WAN links to manage total capacity and policy-based steering as a single logical pipe.

Answer

To set the time zone

Answer

To define VLANs

Answer

To limit internal file transfers

Question 6

If a user at a branch site reports that they cannot access a specific internal server, which diagnostic tool should you use first?

Accepted Answer

Review Flow Monitoring logs. Flow monitoring allows you to see if traffic is hitting the expected policy and where it is being dropped or steered.

Answer

Check the cloud status page

Answer

Check physical cables

Answer

Reboot the ION

Question 7

Which Prisma SD-WAN component is responsible for orchestrating the overall security policy across the entire fabric?

Accepted Answer

The Prisma Controller. The Controller manages global policies, including security policies, pushed to ION devices.

Answer

The local firewall

Answer

The ION device itself

Answer

The DNS server

Question 8

What is the primary benefit of enabling 'Forward Error Correction' (FEC) on a high-latency WAN link?

Accepted Answer

It improves performance for jitter-sensitive traffic. FEC adds redundant data to packets, allowing the receiver to reconstruct lost packets without retransmission.

Answer

It bypasses the firewall

Answer

It replaces the need for QoS

Answer

It reduces total bandwidth usage

Question 9

What is the primary function of the 'Controller' dashboard in the Prisma SD-WAN UI?

Accepted Answer

To provide visibility into fabric health and status. The dashboard provides a high-level view of health, status, and traffic analytics.

Answer

To configure individual PC settings

Answer

To update user passwords

Answer

To manage ISP billing

Question 10

When using Prisma SD-WAN with Prisma Access, how is the secure tunnel established?

Accepted Answer

Automated tunnel provisioning via the Controller. The ION device automatically provisions an IPsec tunnel to the Prisma Access Cloud Service Edge (CSE).

Answer

Manual IPsec configuration

Answer

Using a BGP peer

Answer

Via a physical cable link

Question 11

You need to ensure that traffic from a specific subnet is placed into a unique VRF. How is this achieved?

Accepted Answer

By assigning the interface to the desired VRF. VRF assignment is mapped to local segments or subnets at the interface configuration level.

Answer

By rebooting the device

Answer

By setting a firewall rule

Answer

By modifying the global routing table

Question 12

Which TWO factors are used by Prisma SD-WAN to determine the health of a WAN path?

Accepted Answer

Packet loss. The SD-WAN engine monitors latency and loss to calculate path quality.

Answer

Physical cable color

Answer

Power supply status

Answer

ISP name

Question 13

When configuring 'NAT', what is the difference between 'Source NAT' and 'Destination NAT'?

Accepted Answer

Source NAT hides internal IPs; Destination NAT directs inbound traffic. Source NAT modifies the source IP for outbound traffic; Destination NAT modifies the destination IP for inbound traffic.

Answer

Destination NAT hides internal IPs

Answer

Only Source NAT is supported

Answer

They are the same

Question 14

Which THREE components are involved in configuring Prisma SD-WAN security policies?

Accepted Answer

Application objects. Security policies rely on application identification, zone definitions, and action rules.

Answer

Physical port numbering

Answer

Hard drive capacity

Question 15

Which THREE types of information are displayed in the Prisma SD-WAN 'Flow Monitoring' view?

Accepted Answer

Source and destination IP. Flow monitoring provides details on path, performance, and application statistics.

Answer

ISP billing records

Answer

Router CPU temperature