SD-WAN-Engineer Planning And Design Practice Test 3 — 15 Questions

Question 1

In the context of the SD-WAN Controller, what does the 'Template' object represent?

Accepted Answer

A reusable configuration baseline. A template is a reusable configuration set applied to multiple gateways to ensure consistency.

Answer

A single device configuration file

Answer

A firmware update package

Answer

A hardware specification sheet

Question 2

A retail customer needs to prioritize POS (Point of Sale) traffic over guest WiFi. Which policy type governs this bandwidth allocation?

Accepted Answer

QoS Policy. QoS Policy is the correct answer because QoS (Quality of Service) policies are specifically designed to classify, mark, and prioritize traffic based on application, user, or source/destination criteria, ensuring POS traffic receives preferential bandwidth treatment over guest WiFi. In SD-WAN environments, QoS policies map traffic to forwarding classes and apply scheduling, shaping, and queuing to guarantee latency-sensitive POS transactions get priority. Security, Route, and Access policies do not control bandwidth allocation or prioritization.

Answer

Security Policy

Answer

Route Policy

Answer

Access Policy

Question 3

A company is migrating to a cloud-native architecture. How does Prisma SD-WAN support multi-cloud connectivity?

Accepted Answer

Virtual Gateways (vGateways). Through CloudBlades and virtual gateways (vGateways) deployed in public cloud VPCs/VNets.

Answer

Manual BGP peering with ISPs

Answer

Physical site-to-site VPNs only

Answer

Cloud-only routing protocols

Question 4

Which Prisma SD-WAN interface is used to connect to the local LAN?

Accepted Answer

LAN Interface. The LAN-side interface connects to switches, servers, and internal users.

Answer

Tunnel Interface

Answer

Management Interface

Answer

WAN Interface

Question 5

You want to audit who changed a policy on the Controller. Where is this information logged?

Accepted Answer

Controller Audit Logs. The Audit logs record all administrative actions, including policy changes.

Answer

Performance Monitoring

Answer

Security Policy Hits

Answer

System Event Logs

Question 6

When setting up a branch, you need to define the 'Underlay' transport. What does this refer to?

Accepted Answer

The physical/logical circuits provided by the ISP. The underlay in SD-WAN refers to the physical or logical transport circuits provided by the ISP — the raw IP connectivity (MPLS, broadband, LTE, etc.) over which the SD-WAN overlay tunnels are built. It is the foundation network that carries encapsulated overlay traffic.

Answer

The internal VLAN structure

Answer

The encrypted VPN tunnels

Answer

The routing protocol used internally

Question 7

Which criteria can be used to steer traffic in a Performance Routing policy? (Choose TWO)

Accepted Answer

Packet Loss. Performance Routing (PfR) is a Cisco IOS feature that optimizes path selection by monitoring and reacting to network performance metrics, so Packet Loss (D) and Latency (E) are both valid steering criteria — PfR tracks these live measurements via IP SLA probes and can move traffic to a better path when thresholds for loss or delay are exceeded. Latency and packet loss are core PfR performance parameters (along with jitter, reachability, and MOS), which is why they are marked correct. Time of day (A) is not a PfR performance criterion; it is used in Policy-Based Routing (PBR) or time-based ACLs, not PfR path selection. Device serial number (B) is a hardware identifier and plays no role in traffic steering decisions. User's physical weight (C) is nonsensical in networking and clearly not a PfR criterion.

Answer

Time of day

Answer

Device serial number

Answer

User's physical weight

Question 8

Which of the following are valid transport types that can be defined in a Prisma SD-WAN site configuration? (Choose TWO)

Accepted Answer

MPLS. In Prisma SD-WAN, a site's transport types define the WAN circuit categories that the branch can use for overlay connectivity, and MPLS (option A) is a valid transport type representing a private, carrier-provided L3 VPN circuit that can carry VPN overlays with SLA-based policies. Public Internet (option E) is also a valid transport type, representing broadband/ISP circuits used for VPN overlays and direct internet breakout, and it is commonly paired with MPLS in active/active or active/backup designs. Bluetooth (option B) is a short-range personal-area wireless technology, not a WAN transport that Prisma SD-WAN sites can define. Fiber Optic (option C) describes a physical medium/link layer rather than a Prisma SD-WAN transport category, and Serial (option D) is a legacy WAN interface type not offered as a site transport type in Prisma SD-WAN.

Answer

Bluetooth

Answer

Fiber Optic

Answer

Serial

Question 9

Which factors should be considered when designing the placement of a regional hub in a Prisma SD-WAN architecture? (Choose TWO)

Accepted Answer

Latency to branch locations. Option B (Latency to branch locations) is correct because a regional hub in Prisma SD-WAN aggregates branch traffic and forwards it to the data center or internet, so the hub must be placed to keep round-trip latency to its branches low enough to meet application SLAs and to allow the hub to serve as an efficient traffic-steering and policy-enforcement point. Option D (Proximity to central data center resources) is correct because branch traffic typically traverses the hub toward centralized applications and services, so physical or network proximity to the data center reduces WAN transit latency and backhaul distance for that traffic. Option A (The ISP's billing cycle) is irrelevant, since billing periods have no bearing on topology or performance design. Option C (The color of the hardware) is irrelevant, as hardware color has no impact on network design. Option E (The number of local users) is not a primary hub-placement factor, because Prisma SD-WAN sizing is driven by aggregate branch traffic and tunnel/bandwidth requirements rather than the count of users at a single site.

Answer

The ISP's billing cycle

Answer

The color of the hardware

Answer

The number of local users

Question 10

When planning for a large-scale deployment, which items are required for the initial site information gather? (Choose THREE)

Accepted Answer

Total bandwidth per link. Option A (Total bandwidth per link) is correct because sizing WAN circuits and QoS/traffic shaping for a large-scale deployment requires knowing the capacity of each link. Option B (Public WAN IP addresses) is correct because public WAN IPs are needed for site-to-site VPN peering, NAT, and firewall/routing configuration at each site. Option E (Internal LAN subnets) is correct because the internal subnet scheme is essential for routing, DHCP scopes, and avoiding address overlap between sites. Options C (Local desk configurations) and D (Employee names) are not part of initial site information gathering, as they are endpoint/user-level details rather than network topology and connectivity data needed for deployment planning.

Answer

Local desk configurations

Answer

Employee names

Question 11

Which of the following are components of the Prisma SD-WAN Controller interface? (Choose TWO)

Accepted Answer

Dashboard. The Prisma SD-WAN Controller (formerly CloudGenix Controller) web interface is organized around a Dashboard view, which provides the top-level summary of network health, site status, link performance, and alarms, so option A is correct. It also includes a Monitoring section that offers detailed drill-down views such as topology, flows, link quality metrics, events, and device-level statistics, making option D correct. Option B is not a Controller interface component; speed testing is performed via link performance monitoring or CLI tools, not as a named interface element. Option C is documentation delivered separately, not part of the Controller UI. Option E relates to physical data center facilities and has no place in the Prisma SD-WAN Controller interface.

Answer

Internet Speed Test

Answer

Hardware installation manual

Answer

Physical server room temperature

Question 12

What are the primary benefits of implementing a hub-and-spoke design with Prisma SD-WAN? (Choose THREE)

Accepted Answer

Simplified management and visibility. Option C is correct because a Prisma SD-WAN hub-and-spoke topology lets administrators manage all branch sites from a central controller (the Prisma SD-WAN portal) and gain unified visibility into WAN health, application performance, and link status across every spoke. Option D is correct because branch traffic destined for other branches or the internet is groomed through the hub, allowing the hub to aggregate, prioritize, and forward flows efficiently rather than maintaining full-mesh tunnels between every site. Option E is correct because the hub acts as a central chokepoint where security policy (e.g., zone-based firewall, IPS, URL filtering) can be consistently enforced for all spoke traffic before it reaches the data center or internet. Option A is not correct because Prisma SD-WAN still requires branch CPE (ION devices or virtual IONs), so deployments are not hardware-less. Option B is not correct because no SD-WAN architecture provides infinite bandwidth at the branch; bandwidth remains bounded by the physical links and licensed throughput.

Answer

Hardware-less branch deployments

Answer

Infinite bandwidth at the branch

Question 13

In a multi-tenant Prisma SD-WAN design, what can be partitioned per tenant? (Choose THREE)

Accepted Answer

Administrative roles. In Prisma SD-WAN multi-tenant deployments, administrative roles (B) can be partitioned per tenant so that each tenant's operators only manage their own resources with scoped RBAC permissions. Virtual Networks (VNets) (C) are tenant-scoped logical segmentation constructs, allowing each tenant to define its own VNet topology and policies independently. Security policies (D) are also tenant-specific, so each tenant can enforce its own zone-based firewall and security rules without affecting others. Global hardware warranty status (A) is an account-wide/global attribute tied to the physical device inventory, not a per-tenant partitionable object. Physical office furniture (E) is not an IT resource managed by Prisma SD-WAN and is irrelevant to tenant partitioning.

Answer

Global hardware warranty status

Answer

Physical office furniture

Question 14

Which are valid methods to connect a branch to the SD-WAN fabric? (Choose TWO)

Accepted Answer

Virtual Gateway (vGateway). Option C, Virtual Gateway (vGateway), is correct because a vGateway is a software-based SD-WAN endpoint that can be deployed as a VM in a branch, cloud, or data center to terminate the SD-WAN fabric and participate in the overlay. Option D, Hardware Appliance (CPE), is correct because a physical SD-WAN CPE device at the branch provides the required WAN edge functionality, encryption, and overlay participation to join the SD-WAN fabric. Option A, a simple hub, is not a valid SD-WAN branch connection method because a hub is a topology role, not a connection mechanism, and it lacks the SD-WAN edge capabilities needed to join the fabric. Option B, a standard home router without SD-WAN software, cannot join the SD-WAN fabric because it lacks the required SD-WAN overlay protocols, certificates, and tunnel termination. Option E, a physical bridge only, is incorrect because a Layer 2 bridge does not provide the SD-WAN edge functions, routing, or secure overlay membership required to connect a branch to the fabric.

Answer

A simple hub

Answer

A standard home router without SD-WAN software

Answer

A physical bridge only

Question 15

Which types of traffic should ideally be prioritized via QoS policies? (Choose TWO)

Accepted Answer

Real-time video conferencing. Option A (real-time video conferencing) is correct because interactive video requires low latency, low jitter, and consistent bandwidth, so QoS should mark it with a high-priority class such as EF or AF41 to keep the call usable. Option B (Voice over IP) is correct because VoIP is highly delay-sensitive and typically uses small UDP packets with RTP; QoS should give it strict priority or a low-latency queue (often DSCP EF, 46) to prevent jitter and packet loss. Options C and D are not correct because background system backups and operating system updates are bulk, non-interactive traffic that can tolerate delay and should be placed in a lower-priority or scavenger class. Option E is not correct because social media browsing is generally non-critical, elastic traffic that does not warrant preferential QoS treatment over real-time communications.

Answer

Background system backups

Answer

Operating system updates

Answer

Social media browsing