A user complains that an internal application is experiencing asymmetric routing. Where in the Prisma SD-WAN orchestrator can you view the path taken by specific packets?
An engineer at a branch site notices that the ION device's control plane is up and the site shows as Connected in the Prisma SD-WAN orchestrator, but no application traffic is passing. The engineer suspects a problem with the data plane tunnel. Which CLI command on the ION device should be used to verify the status of the data plane tunnels?
A network administrator is troubleshooting an issue where a branch ION device is not forming an IPsec tunnel to a remote site. The administrator has verified that the underlay network is operational and that both devices have valid public IP addresses. Which of the following should be checked next to ensure the IPsec tunnel can establish?
A network engineer is troubleshooting a Prisma SD-WAN site where the ION device shows the WAN interface as up, but the site status in the orchestrator is 'Disconnected'. The management tunnel appears to be down. Which command should the engineer run first on the ION device to verify the status of the management tunnel?
A network administrator is troubleshooting an ION device that is not establishing a control connection to the Prisma SD-WAN Controller. The administrator has verified basic IP connectivity to the controller's public IP address. Which CLI command should be used to display the status of the control plane tunnel and verify the local device's authentication state?
A network administrator is troubleshooting an issue where a branch site's ION device is not receiving routes from the data center ION device over the SD-WAN fabric. The control plane is up, and tunnels are established. Which CLI command on the branch ION device would best help verify whether BGP routes are being learned from the data center?
A network administrator is investigating intermittent packet loss on a Prisma SD-WAN data path between two branch sites. The administrator suspects that the issue is related to the IPsec tunnel's dead peer detection (DPD) settings. Which action should the administrator take to view the current DPD configuration and statistics on an ION device?
A network engineer notices that an ION device at a branch site is not forming a secure fabric tunnel with any other ION devices, even though the device shows as connected to the Prisma SD-WAN Controller. The engineer suspects a certificate issue. Which CLI command on the ION device should be used to verify the status of the device certificate?
A network engineer is troubleshooting a routing issue in a Prisma SD-WAN deployment. The engineer needs to verify the BGP peering status and the routes learned from a specific branch ION device. Which CLI command should the engineer use on the ION device to display BGP neighbor information and advertised/received routes?
A network engineer is troubleshooting a site that is unable to reach the Prisma SD-WAN controller. The engineer suspects a DNS resolution issue. Which command should be used on the ION device to verify DNS resolution of the controller's hostname?
A network operations team is troubleshooting a routing loop in a Prisma SD-WAN environment. They suspect that an ION device is receiving incorrect BGP routes from a peer. Which tool should they use to view the BGP routes received by the ION device?
A network engineer notices that an ION device at a branch site is not forming a BGP peering with the local router. The engineer runs 'show bgp neighbors' on the ION device and sees the peer in 'Active' state. Which of the following is the most likely reason for the peering failure?
A network administrator is troubleshooting an IPsec tunnel that is flapping between two ION devices. The administrator suspects that the issue is related to the Dead Peer Detection (DPD) settings. Which parameter should be adjusted to make the DPD more tolerant of temporary network delays?
A network engineer is troubleshooting a Prisma SD-WAN environment where an ION device at a branch site is not forming a secure Fabric connection with another ION device at a data center. The engineer has verified that both devices are online and have valid licenses. Which TWO steps should the engineer take to troubleshoot this issue? (Choose two.)
A network engineer is troubleshooting a Prisma SD-WAN environment where a branch ION device is not receiving an IP address from the DHCP server on the LAN side. The engineer has verified that the DHCP server is operational and other devices on the same LAN are getting addresses. Which of the following should the engineer check on the ION device?
A branch site reports intermittent application slowness. Which tool in the Prisma SD-WAN ION dashboard is best for viewing real-time latency and jitter metrics per path?
An engineer notices that an ION device at a branch site shows a WAN interface status of 'up' in the Prisma SD-WAN orchestrator, but no traffic is being forwarded over that interface. The interface is configured for DHCP. Which troubleshooting step should be performed first to determine why the interface is not passing traffic?
A network administrator is troubleshooting an ION device at a branch site that intermittently loses connectivity to the Prisma SD-WAN Controller. The administrator suspects a problem with the underlying WAN link. Which CLI command provides the most direct real-time view of the interface status, IP address, and packet counters for the WAN interfaces?
A network engineer is troubleshooting a site where traffic from a specific VLAN is not being forwarded to the correct VPN overlay. The engineer suspects a misconfiguration in the network policy. Which tool in the Prisma SD-WAN Orchestrator should the engineer use to view the effective policy applied to that site and verify the path selection decisions?
A network engineer is troubleshooting an SD-WAN deployment where an ION device at a branch site is not forming a control connection to the Prisma SD-WAN Controller. The device is powered on and has a link light on its WAN port. The engineer suspects a certificate or licensing issue. Which two items should the engineer verify to confirm the device's identity and authorization with the controller? (Choose two.)
A network administrator is troubleshooting a branch site that is experiencing poor voice quality. The administrator suspects that the SD-WAN fabric is not prioritizing voice traffic correctly. Which dashboard in the Prisma SD-WAN Orchestrator provides a real-time view of application performance, including latency, jitter, and packet loss per application?
A network operations team is troubleshooting an intermittent connectivity issue between two branch sites. The ION devices at both sites are managed by Prisma SD-WAN. The team suspects that the issue is related to the underlay network. Which two actions should the team perform to gather relevant troubleshooting data? (Choose two.)
A network engineer is troubleshooting an ION device that frequently reboots and loses its configuration. The engineer suspects a hardware or software issue. Which two commands should be used to gather relevant diagnostic information from the ION device? (Choose two.)
A network administrator is investigating why a specific SaaS application is being blocked for users at a branch site. The security policy in the orchestrator does not show any hits for that application. The administrator suspects that the ION device is not correctly identifying the application. Which feature should be verified to ensure the application is recognized and allowed?
A network administrator is troubleshooting a site that is experiencing poor voice quality over the SD-WAN. The administrator suspects that the voice traffic is not being prioritized correctly. Which SD-WAN feature should be verified to ensure that voice packets are marked and queued appropriately across the WAN?
A network operations team is troubleshooting a Prisma SD-WAN network where a specific branch site is experiencing poor voice quality. The team suspects that the issue is due to the branch's WAN link not meeting the required SLA for jitter. Which tool in the Prisma SD-WAN orchestrator should the team use to verify the real-time jitter measurements for the branch's WAN link?
A network engineer is investigating why a branch site is not receiving any traffic from the data center after a recent change. The engineer suspects that the SD-WAN fabric is not advertising the branch's subnet correctly. Which CLI command on the ION device can be used to verify the routes being advertised to and received from the SD-WAN fabric?
A network operations team is troubleshooting a Prisma SD-WAN environment where multiple sites are reporting intermittent connectivity to critical cloud applications. The team suspects an issue with the SD-WAN fabric's path selection or link quality. Which two actions should the team perform to gather the most relevant data for diagnosis? (Choose two.)
A network engineer is troubleshooting a Prisma SD-WAN deployment where a new ION device at a remote site fails to establish any data plane tunnels to other sites. The engineer has verified that the control connection to the controller is up and the device is showing as 'Connected' in the orchestrator. Which step should the engineer take next to diagnose the data plane tunnel issue?
A network administrator is troubleshooting an ION device that is experiencing intermittent packet loss on its WAN interface. The administrator wants to determine whether the issue is due to physical layer errors or congestion. Which CLI command provides the most detailed statistics for identifying such problems?
A network engineer is analyzing a Prisma SD-WAN network where a critical SaaS application is experiencing intermittent performance degradation. The engineer suspects that the SD-WAN policy is not correctly steering traffic to the optimal path. Which feature in the Prisma SD-WAN orchestrator should the engineer use to verify the path selection decisions made for the application's traffic flows?
A network administrator is examining the Prisma SD-WAN orchestrator dashboard to identify which sites are consuming the most bandwidth. Which dashboard widget should the administrator use to quickly see the top bandwidth consumers?
A network engineer is troubleshooting why a branch ION device is not receiving any traffic from the data center. The engineer suspects that a firewall rule on the ION device is blocking traffic. Which log should the engineer check to see if traffic is being dropped by the firewall?
A network administrator is troubleshooting a Prisma SD-WAN environment where an ION device is experiencing intermittent packet loss on a business-critical application. The administrator suspects that the issue is related to a policy misconfiguration. Which two actions should the administrator take to verify that the correct policies are being applied to the traffic? (Choose two.)
A network operations center (NOC) engineer is monitoring a Prisma SD-WAN deployment and notices that one ION device at a remote site is consistently showing high latency on its broadband link, while the LTE link is performing well. The engineer wants to quickly identify whether the high latency is due to an ISP issue or a device problem. Which of the following should the engineer check first?
A network engineer is troubleshooting a Prisma SD-WAN environment where a branch site is experiencing intermittent connectivity to a critical cloud application. The engineer suspects that the issue is related to the SD-WAN fabric's handling of the application's traffic. Which of the following tools should the engineer use to capture and analyze the actual packets traversing the ION device to determine if packets are being dropped or modified?
A network engineer is investigating a performance issue in a Prisma SD-WAN environment where an ION device is showing high jitter on a business-critical VoIP call. The engineer has verified that the WAN link quality is good and that no policies are misconfigured. The engineer suspects that the issue might be due to the ION device's handling of the traffic. Which of the following should the engineer check next to determine if the ION device is correctly marking and prioritizing the VoIP traffic?
A network engineer is troubleshooting a site that is experiencing intermittent connectivity issues. The ION device shows the WAN interface flapping. Which two CLI commands should the engineer use to gather information about the interface flapping? (Choose two.)
A network operations center (NOC) engineer is investigating a performance issue at a branch site. The engineer needs to identify which application is consuming the most bandwidth on the WAN link. Which dashboard in the Prisma SD-WAN orchestrator should the engineer use?
An administrator is troubleshooting a routing loop that occurs intermittently between two branch sites. The administrator suspects that the BGP route advertisements received by one of the ION devices are causing the loop. Which tool in the Prisma SD-WAN orchestrator can be used to view the BGP routes received by an ION device?
A network engineer is troubleshooting a Prisma SD-WAN environment where a branch ION device is not forming a control-plane connection to the controller. The engineer has verified that the underlay WAN interface is up and can ping the internet. Which step should the engineer take next to diagnose the control-plane issue?
A network engineer is troubleshooting a Prisma SD-WAN site where a specific business-critical application is experiencing high latency. The engineer wants to quickly identify which WAN path the application traffic is currently using and its performance metrics. Which tool in the Prisma SD-WAN orchestrator should the engineer use?
A network engineer is troubleshooting a Prisma SD-WAN deployment where an ION device has established a control connection to the controller but is not receiving any configuration. The engineer verifies that the device is licensed and the controller is reachable. Which of the following should the engineer check next to resolve the missing configuration?
A network administrator is troubleshooting a Prisma SD-WAN environment where a branch ION device is configured with two WAN interfaces: one primary and one secondary. The administrator notices that all traffic is being sent over the secondary WAN interface even though the primary interface is up and has better path quality. Which of the following is the most likely cause?
A network administrator is troubleshooting a Prisma SD-WAN environment and needs to view the current status of all WAN interfaces on a specific ION device. Which section of the Prisma SD-WAN portal should the administrator navigate to?