SD-WAN-Engineer Planning And Design — 15 Questions

Question 1

A branch office uses both MPLS and Broadband. The design requires that business-critical traffic prefers MPLS, failing over to Broadband only if the MPLS path experiences packet loss exceeding 1%. Which metric should the PFR policy utilize?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Packet Loss. Performance Routing policies rely on path metrics like loss, latency, and jitter to make routing decisions.

Answer

Bandwidth Utilization

Answer

Jitter

Answer

Round Trip Time (RTT)

Question 2

A customer requires a granular segmentation strategy where HR, Engineering, and Guest traffic must remain isolated across the SD-WAN fabric. Which configuration construct provides this logical separation?

Accepted Answer

Virtual Networks (VNets). Virtual Networks (VNets) allow for the logical segmentation of traffic throughout the fabric.

Answer

IPsec Tunnel Groups

Answer

Subnet Masking

Answer

VLAN Tagging

Question 3

A network architect is designing a branch site deployment requiring sub-second failover. Which Prisma SD-WAN component must be configured to prioritize real-time traffic across multiple transport paths based on path quality metrics?

Accepted Answer

Performance Routing (PFR) Policy. Performance Routing (PFR) policies are configured to monitor path quality and dynamically steer traffic.

Answer

Traffic Policing Rule

Answer

NAT Control Policy

Answer

Access Control List (ACL)

Question 4

Which Prisma SD-WAN tool is used to monitor real-time health and performance of the SD-WAN fabric during the deployment phase?

Accepted Answer

Controller Dashboard. The Prisma SD-WAN Controller provides the dashboard and analytics tools for monitoring.

Answer

SNMP Traps

Answer

CLI Debugging

Answer

Packet Capture (PCAP)

Question 5

What is the primary function of the CloudBlades platform in the Prisma SD-WAN architecture?

Accepted Answer

API-based service integration. CloudBlades is the API integration platform that allows for seamless integration with third-party cloud services.

Answer

Encryption key rotation

Answer

Hardware acceleration

Answer

Local breakout management

Question 6

During pre-deployment planning for a high-security site, you must implement an identity-aware firewall policy. Where is this configuration mapped in the Prisma SD-WAN Controller?

Accepted Answer

Identity-Based Security Policy. The Security Policy allows for user-identity mapping and service enforcement.

Answer

NAT Policy

Answer

Routing Policy

Answer

Quality of Service Policy

Question 7

You are designing a hub-and-spoke topology where spokes need to communicate directly under specific conditions. Which feature should be enabled to optimize latency and minimize load on the regional hub?

Accepted Answer

Dynamic Mesh. Dynamic Mesh allows spokes to build direct tunnels to each other bypassing the hub when policy requirements are met.

Answer

Hub-to-Hub Transit

Answer

BGP Route Reflector

Answer

Global VPN Overlay

Question 8

When designing a multi-tenant environment, how does the Prisma SD-WAN Controller ensure that management traffic is separated for each entity?

Accepted Answer

Logical Tenant Partitioning. The Controller uses multi-tenancy constructs where each tenant is logically partitioned.

Answer

Shared Management VLANs

Answer

Client-side tunnel encryption only

Answer

Dedicated physical interfaces

Question 9

You are configuring a branch site with a dual-ISP setup. What is the correct order of operations for defining transport interfaces?

Accepted Answer

Configure IP, then assign interface to a WAN transport type. Interfaces must be defined in the inventory, then assigned as transport in the site configuration.

Answer

Enable IPSec, then configure interface

Answer

Enable BGP, then configure WAN interface

Answer

Assign WAN interface to Transport group, then define IP

Question 10

When integrating Prisma SD-WAN with a cloud-based security service provider (CSSP) via CloudBlades, which setting must be verified to ensure proper traffic redirection?

Accepted Answer

Service-to-Tunnel Mapping. The service mapping in CloudBlades ensures that traffic classified for security inspection is steered to the correct CSSP node.

Answer

Local ISP DNS settings

Answer

DHCP Server scope

Answer

VLAN ID matching

Question 11

Which protocol is utilized for the auto-discovery of Prisma SD-WAN Gateways during site provisioning?

Accepted Answer

ZTP (Zero Touch Provisioning). The Zero-Touch Provisioning (ZTP) process uses the controller to push configurations after the gateway registers via the secure cloud portal.

Answer

SNMP

Answer

RIPv2

Answer

TFTP

Question 12

Which Prisma SD-WAN feature enables the automatic configuration of security parameters for a new gateway?

Accepted Answer

Security Template. The security template is a container that holds policies, which are applied to gateways during provisioning.

Answer

Firewall Rule set

Answer

Zone Configuration

Answer

Credential Vault

Question 13

During the design of a large-scale data center migration, you need to extend Layer 2 domains across the SD-WAN fabric. Which mechanism supports this requirement?

Accepted Answer

L2-Over-SD-WAN (L2VPN). Prisma SD-WAN supports L2 extension through encapsulation over the SD-WAN overlay.

Answer

STP Bridge Group

Answer

Proxy ARP

Answer

BGP EVPN

Question 14

You need to ensure that branch office voice traffic always has the lowest latency. Which QoS classification strategy is recommended?

Accepted Answer

DSCP Marking and Queueing. Prioritizing voice (EF class) in the QoS policy ensures it gets priority access to the transport queue.

Answer

Flow Control

Answer

Bandwidth Reservation

Answer

Rate Limiting

Question 15

A site deployment requires specific traffic to be exempted from the SD-WAN optimization process to ensure compatibility with a legacy application. Which policy should be updated?

Accepted Answer

Application Policy. Application Policy rules allow you to specify traffic types that should bypass optimization.

Answer

NAT Policy

Answer

Security Policy

Answer

Interface Policy