SD-WAN-Engineer Troubleshooting Practice Test 2 — 15 Questions

Question 1

A user reports that a specific SaaS application is being blocked, but no security policy matches are seen. What is the most likely cause?

Accepted Answer

Implicit Deny policy. If no policy match is found, the traffic may be hitting the default implicit deny or is being blocked by a local device policy.

Answer

Memory exhaustion

Answer

Encryption mismatch

Answer

BGP path selection error

Question 2

When troubleshooting QoS, what does a high 'drop' count in the interface statistics imply?

Accepted Answer

Interface congestion. High drop counts indicate that the interface is congested and exceeding the configured bandwidth limit.

Answer

Hardware failure

Answer

Security policy blocking

Answer

The ISP is down

Question 3

What information is provided by the 'Controller Status' widget on the dashboard?

Accepted Answer

Connectivity between ION and Controller. It confirms the connectivity status between the ION and the controller.

Answer

LAN port status

Answer

Site-to-site VPN health

Answer

ISP latency

Question 4

You are debugging a routing loop. Which tool can you use to see the BGP route advertisements received by an ION device?

Accepted Answer

Route Monitoring. The BGP neighbor status and route tables in the device monitoring show learned routes.

Answer

Path Quality

Answer

Flow Summary

Answer

Interface Stats

Question 5

Which log is used to view denied traffic attempts?

Accepted Answer

Security Logs. Security logs capture events related to security policies, including denies.

Answer

Flow Logs

Answer

Audit Logs

Answer

System Logs

Question 6

You need to see the exact DSCP markings on packets exiting the ION. Which tool should you use?

Accepted Answer

Packet Capture. A Packet Capture allows for deep packet inspection of headers like DSCP.

Answer

Flow Monitor

Answer

Path Quality

Answer

Interface Stats

Question 7

If an ION device is not receiving DHCP addresses from an upstream provider, where should you look first?

Accepted Answer

WAN Interface settings. The WAN interface configuration and status are the first places to verify DHCP settings.

Answer

Routing policies

Answer

LAN DHCP Server settings

Answer

Firewall rules

Question 8

A branch is failing to load-balance traffic across two ISPs. Both are active. Which setting controls the load-balancing algorithm?

Accepted Answer

Path Selection Policy. The Path Selection policy defines how traffic is distributed across available paths.

Answer

NAT Policy

Answer

Interface Bandwidth Settings

Answer

QoS Policy

Question 9

A user reports slow speeds. You see that the interface is not hitting the configured throughput limit. What could be the issue?

Accepted Answer

ISP side congestion. If the interface is not the bottleneck, the bottleneck may exist further upstream in the ISP network.

Answer

QoS priority too high

Answer

Incorrect IP address

Answer

Too many VLANs

Question 10

What is the function of the 'Reachability' check in the ION device configuration?

Accepted Answer

To verify ISP link status. It tests if the path is actually capable of reaching the destination, confirming path health.

Answer

To update firmware

Answer

To backup configuration

Answer

To check CPU load

Question 11

Which dashboard is most useful for identifying top bandwidth consumers in the network?

Accepted Answer

Application/Flow Monitoring. The App/Flow dashboard identifies top applications and users by bandwidth.

Answer

Path Quality

Answer

System Health

Answer

Security Events

Question 12

A branch loses connectivity to the internet, but local LAN traffic is fine. What should you troubleshoot first?

Accepted Answer

ISP connection and WAN interface. If local traffic works, the LAN is fine. The focus should be on the WAN edge.

Answer

Device power supply

Answer

DHCP server settings

Answer

Core Switch configuration

Question 13

Which mechanism would explain why traffic is taking a sub-optimal path despite a policy favoring a different link?

Accepted Answer

Path health failure. If the preferred path fails the path-health check, the ION will automatically fail over to a sub-optimal path.

Answer

BGP route dampening

Answer

QoS policy override

Answer

Duplicate IP address

Question 14

Which TWO items are checked by the ION device to determine if a WAN path is healthy?

Accepted Answer

Packet loss. The path health engine evaluates both packet loss and latency/jitter.

Answer

Device temperature

Answer

User authentication status

Answer

Local disk space

Question 15

Which TWO of these are valid ways to verify the status of an ION device's WAN interface?

Accepted Answer

Check the Interface dashboard in the orchestrator. Checking the UI interface dashboard and using the CLI 'show interface' command are both standard verification methods.

Answer

Review the BIOS logs

Answer

Ping the device from the internet

Answer

Check the DNS logs