You are troubleshooting a performance issue where traffic is not taking the expected 'optimal' path. Which tool should you examine first to see the PFR path selection decision?
You are designing a Prisma SD-WAN deployment for a retail chain with 400 branch sites, each with two broadband circuits and one LTE backup. The design must keep per-tunnel bandwidth overhead predictable and minimize encapsulation size on the LTE link, which is metered. Which WAN interface encapsulation setting should you specify in the site template?
You are designing a Prisma SD-WAN deployment for a retail bank with 300 branch sites. Each site has two internet circuits from different ISPs and one MPLS circuit. The bank's security policy requires that all management traffic to the Prisma SD-WAN Controller be encrypted and that branches never communicate directly with each other. Which design element must you include to meet these requirements?
A network engineer is planning a Prisma SD-WAN deployment for a company that requires high availability at the data center. The data center will have two ION devices connected to two separate WAN circuits and two separate LAN switches. Which design consideration ensures that the ION devices can fail over without manual intervention?
A retail chain is designing a Prisma SD-WAN deployment for 150 small stores. Each store has a single broadband circuit and a 4G/LTE modem for backup. The design must minimize hardware footprint and avoid any on-site configuration by non-technical staff. Which deployment model should be chosen for the branch sites?
A financial services firm is planning a Prisma SD-WAN deployment for its headquarters and 200 branches. The firm requires that all traffic from branches to the internet be inspected by a cloud-based security service, and that branch-to-branch traffic be optimized for latency. Which Prisma SD-WAN design component should be used to redirect internet-bound traffic to the cloud security service?
A network architect is designing a Prisma SD-WAN deployment for a large enterprise with multiple data centers and branches. The design must ensure that the SD-WAN fabric can scale to thousands of sites and that traffic engineering policies can be applied consistently. Which two design considerations are essential for achieving this scalability and policy consistency? (Choose two.)
A financial institution is designing a Prisma SD-WAN deployment for its headquarters and 40 branches. The security team requires that all traffic from branches to the data center be encrypted and that branch-to-branch traffic be inspected by a firewall in the data center. The design must also minimize bandwidth consumption on the WAN. Which Prisma SD-WAN design element should be implemented to meet these requirements?
A branch office uses both MPLS and Broadband. The design requires that business-critical traffic prefers MPLS, failing over to Broadband only if the MPLS path experiences packet loss exceeding 1%. Which metric should the PFR policy utilize?
A customer requires a granular segmentation strategy where HR, Engineering, and Guest traffic must remain isolated across the SD-WAN fabric. Which configuration construct provides this logical separation?
A network architect is designing a branch site deployment requiring sub-second failover. Which Prisma SD-WAN component must be configured to prioritize real-time traffic across multiple transport paths based on path quality metrics?
During pre-deployment planning for a high-security site, you must implement an identity-aware firewall policy. Where is this configuration mapped in the Prisma SD-WAN Controller?
You are designing a hub-and-spoke topology where spokes need to communicate directly under specific conditions. Which feature should be enabled to optimize latency and minimize load on the regional hub?
When integrating Prisma SD-WAN with a cloud-based security service provider (CSSP) via CloudBlades, which setting must be verified to ensure proper traffic redirection?
During the design of a large-scale data center migration, you need to extend Layer 2 domains across the SD-WAN fabric. Which mechanism supports this requirement?
A site deployment requires specific traffic to be exempted from the SD-WAN optimization process to ensure compatibility with a legacy application. Which policy should be updated?
You are designing an SD-WAN path for a high-bandwidth application that is sensitive to out-of-order packets. Which configuration setting minimizes packet reordering in a multi-path environment?
You are designing a Prisma SD-WAN deployment for a retail chain with 300 small branch sites. Each site has a single broadband link and a 4G/LTE backup. The customer requires that the SD-WAN fabric automatically detect when the primary link degrades and switch traffic to the backup without manual intervention. Which Prisma SD-WAN feature should you include in the design to meet this requirement?
A financial services company is designing a Prisma SD-WAN deployment for its headquarters and 50 branch offices. The security team requires that all traffic from branches to the internet be inspected by a cloud-based security service without backhauling to headquarters. Which Prisma SD-WAN design element should you use to meet this requirement?
A retail company is deploying Prisma SD-WAN at 300 branch sites. The design team wants to minimize the number of IP addresses used on the WAN side of each branch and avoid manually configuring static IPs on every CPE. Which WAN interface addressing method should be specified in the site design to meet these requirements?
A network architect is designing a Prisma SD-WAN deployment for a retail chain with 400 small branches. Each branch has a single broadband circuit and a 4G/LTE backup. The design must minimize hardware cost at the branch while still supporting the SD-WAN fabric. Which ION device deployment approach best fits this requirement?
You are designing a Prisma SD-WAN solution for a multinational enterprise with sites in North America, Europe, and Asia. The company wants to ensure that real-time voice traffic is prioritized over bulk data transfers across the SD-WAN fabric. Which two design elements should you include to achieve this? (Choose two.)
A financial services firm is designing Prisma SD-WAN for a data center that must advertise its internal subnets to the SD-WAN fabric. The design requires dynamic route exchange with the SD-WAN Controller and automatic propagation of learned routes to branch sites. Which routing approach should be specified on the data center CPE?
A design team is planning a Prisma SD-WAN rollout and needs to document how branch sites will learn routes to remote subnets without manually defining every prefix. They want the fabric to automatically exchange reachability information between sites. Which capability should the design rely on?
An engineer is designing a Prisma SD-WAN topology for a company with a primary data center, a secondary data center, and 200 branches. The requirement is that branch-to-data-center traffic must traverse the primary data center under normal conditions and only use the secondary data center if the primary becomes unreachable. Which design element should be used to express this preference?
A healthcare organization is planning a Prisma SD-WAN design for its clinics. The design must ensure that each clinic can reach the internet directly for guest traffic while also reaching internal applications through the SD-WAN fabric. Which two design elements should be included in the site configuration? (Choose two.)
A network architect is planning a Prisma SD-WAN deployment for a retail chain with 400 small branches. Each branch will have two broadband circuits from different providers and must be able to fail over to a cellular modem during an outage. The architect wants to minimize hardware footprint and central management overhead. Which design element should be included in the plan to meet these requirements?
A manufacturing company is designing its Prisma SD-WAN topology. The design team wants a simple hub-and-spoke model where all branch-to-branch traffic flows through the data center hub for inspection. Which topology design should be specified in the fabric?
During a Prisma SD-WAN design review, a team must decide how branch users will authenticate to the corporate identity provider for policy-based access to SaaS applications, without deploying a separate identity appliance at each branch. Which design approach should be recommended?
A network architect is designing a Prisma SD-WAN deployment for a retail chain with 300 small branch sites, each with two broadband circuits and no MPLS. The design must ensure that if a branch's active tunnel degrades, traffic fails over within a few seconds without requiring BGP reconvergence. Which ION device configuration element should be included in the design to meet this requirement?
A financial services company is designing a Prisma SD-WAN topology for a data center that hosts a trading application. The application requires sub-10 ms latency to a specific colocation facility and must not traverse any public internet path. The design team needs to enforce this requirement across all branches. Which Prisma SD-WAN design approach should be used?
A global enterprise is designing Prisma SD-WAN for regions with unreliable broadband. The design must ensure that if the primary WAN transport degrades beyond acceptable thresholds, traffic automatically moves to the secondary transport without manual intervention. Which design element should be specified?
A design team is planning the underlay for a Prisma SD-WAN branch that will use two independent internet circuits plus an LTE link. They must decide which transport configuration characteristics to document for the ION device. (Choose two.)
You are designing branch connectivity for a manufacturer that requires deterministic failover between a primary MPLS circuit and a secondary internet circuit, and the security team mandates that traffic to a specific PCI-scoped subnet be inspected by a next-generation firewall appliance sitting inline at the branch. Which two Prisma SD-WAN design elements must you include to meet these requirements? (Choose two.)
A multinational enterprise is designing a Prisma SD-WAN topology with hubs in North America, Europe, and Asia. The design requires that branch-to-branch traffic within the same region use direct tunnels, while inter-region traffic must traverse a regional hub for security inspection. Which Prisma SD-WAN design element should be used to enforce this traffic flow?
A multinational enterprise is designing a Prisma SD-WAN deployment across 50 sites in North America, Europe, and Asia. The company wants to ensure that each region uses a local Prisma SD-WAN Controller to reduce management latency, while still allowing global policy enforcement. Which design approach should you recommend?
A network engineer is planning the Prisma SD-WAN deployment for a new campus site. The site will use two ISP circuits and must support direct internet breakout for guest traffic while keeping corporate traffic on the VPN overlay. Which site configuration element is required to enable this design?
A hospital network team is planning a Prisma SD-WAN rollout and needs to confirm which component is responsible for maintaining the authoritative configuration and distributing policy to all ION devices across 60 clinics. Which component performs this role?
A design team is planning a Prisma SD-WAN deployment for a manufacturing company with 25 factories. Each factory has industrial control systems that must remain isolated from corporate IT traffic, and the company wants to avoid extending Layer 2 across the WAN. Which two design elements should be included in the plan? (Choose two.)
A network architect is planning a Prisma SD-WAN deployment for a company with 20 branch offices. The company wants to ensure that if a branch's primary internet circuit fails, traffic automatically switches to a secondary LTE circuit. Which Prisma SD-WAN feature should be configured to meet this requirement?
A financial services firm is designing Prisma SD-WAN for a hub-and-spoke topology where 25 regional offices connect to two data centers. The design must ensure that if a regional office loses its primary path to Data Center A, traffic can reach Data Center B without requiring a full mesh of tunnels between every branch pair. Which Prisma SD-WAN capability should the design rely on?
A global enterprise is designing Prisma SD-WAN for regions with limited bandwidth and high latency. The design must ensure that voice traffic receives priority over bulk data transfers and that the WAN links are not oversubscribed. Which combination of design elements should be included in the plan?
An energy company is planning a Prisma SD-WAN design for a remote drilling site that has intermittent satellite connectivity and only occasional on-site staff. The design must minimize on-site configuration effort and ensure the device can be replaced by non-technical personnel if it fails. Which design approach best meets these constraints?
A company is designing a Prisma SD-WAN deployment for a branch that has a single MPLS circuit and a single internet circuit. The design requires that voice traffic use MPLS and fail over to internet only if MPLS latency exceeds 150 ms. Which Prisma SD-WAN policy configuration should be used to meet this requirement?
An enterprise is designing Prisma SD-WAN for a data center that hosts business-critical applications. The design requires that traffic from branch sites to these applications be steered over a specific set of high-performance circuits, while all other internet-bound traffic uses a different set of circuits. The solution must be scalable and not require per-application static routes on every branch device. What should be used in the design?
A financial services company is designing a Prisma SD-WAN deployment with strict compliance requirements. The design must ensure that branch-to-branch traffic carrying cardholder data is encrypted end-to-end and that the SD-WAN fabric can prove which path was used for auditing. Which combination of Prisma SD-WAN features should be included in the design?
A healthcare provider is planning a Prisma SD-WAN rollout across 80 clinics. Each clinic has two broadband circuits from different ISPs and a requirement that telehealth video traffic maintain latency below 100 ms and jitter below 30 ms. The design must automatically steer telehealth traffic to the best-performing circuit and fail over if thresholds are breached. Which Prisma SD-WAN design element is required?
A logistics company is designing Prisma SD-WAN for a hub-and-spoke topology with a primary data center and a secondary data center for disaster recovery. The design must ensure that branch traffic reaches the primary data center under normal conditions and automatically uses the secondary data center if the primary becomes unreachable. Which two design elements are required to meet these requirements? (Choose two.)
A healthcare organization is designing a Prisma SD-WAN deployment for 25 clinics. Each clinic will have two broadband circuits and a single ION device. The security team requires that all internet-bound traffic from the clinics be inspected by a cloud-delivered security service, and that traffic be automatically rerouted if the primary circuit degrades. Which design element should the engineer include to meet these requirements?
A financial institution is designing a Prisma SD-WAN deployment across 40 branches and two data centers. The design must ensure that branch-to-branch traffic takes the most efficient path and that the network can automatically recover from a data center failure. Which two design elements should be included? (Choose two.)
A network engineer is planning a Prisma SD-WAN deployment for a small office with a single broadband circuit and a 4G/LTE modem for backup. The office needs to maintain connectivity to cloud applications even when the broadband circuit fails. Which design approach should the engineer use?
A healthcare organization is designing a Prisma SD-WAN deployment for 80 clinics. Each clinic has two broadband circuits from different ISPs. The design must ensure that if one circuit fails, all traffic automatically reroutes to the other circuit without manual intervention, and that the SD-WAN fabric continuously monitors both paths. Which Prisma SD-WAN feature should be included in the design to meet these requirements?
A network architect is planning a Prisma SD-WAN deployment for a company with 200 sites. The company wants to ensure that each site's WAN interfaces are correctly identified and that policies can be applied based on site-specific attributes. Which Prisma SD-WAN configuration element should be used to uniquely identify each site and associate it with its WAN interfaces?
A company is designing a Prisma SD-WAN deployment for its data center and 100 branches. The design team needs to ensure that the data center can provide high availability and that branch traffic is securely encrypted. Which two design elements should be included to meet these requirements? (Choose two.)
A multinational corporation is planning a Prisma SD-WAN deployment across 500 sites in multiple regions. The design must ensure that traffic from branch users to SaaS applications like Microsoft 365 is directed to the nearest Point of Presence (PoP) for optimal performance, while traffic to internal data centers is backhauled. Which Prisma SD-WAN feature should be leveraged to achieve this?