SD-WAN-Engineer Troubleshooting Practice Test 5 — 15 Questions

Question 1

A network engineer is troubleshooting an ION device that frequently reboots and loses its configuration. The engineer suspects a hardware or software issue. Which two commands should be used to gather relevant diagnostic information from the ION device? (Choose two.)

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

show tech-support. To diagnose frequent reboots and configuration loss, the engineer needs system logs and a comprehensive diagnostic snapshot. The 'show log system' command reveals boot and error messages, while 'show tech-support' collects all relevant data for analysis. Together, they provide the necessary information to identify hardware failures, software bugs, or other causes of instability.

Answer

show arp

Answer

show running-config

Answer

show interface counters

Question 2

A network administrator is investigating why a specific SaaS application is being blocked for users at a branch site. The security policy in the orchestrator does not show any hits for that application. The administrator suspects that the ION device is not correctly identifying the application. Which feature should be verified to ensure the application is recognized and allowed?

Accepted Answer

Application identification and signature database version. When a SaaS application is blocked but no security policy hits are seen, the likely cause is that the ION device is not identifying the application correctly. This often stems from an outdated application signature database. Ensuring the database is current allows the device to recognize the application and apply the correct policy, resolving the block.

Answer

WAN interface load balancing algorithm

Answer

BGP route advertisements

Answer

Quality of Service (QoS) policy configuration

Question 3

A network administrator is troubleshooting a site that is experiencing poor voice quality over the SD-WAN. The administrator suspects that the voice traffic is not being prioritized correctly. Which SD-WAN feature should be verified to ensure that voice packets are marked and queued appropriately across the WAN?

Accepted Answer

QoS policy. Voice quality depends on proper prioritization across the WAN, which is achieved through QoS policies. These policies classify voice traffic, mark it with appropriate DSCP values, and place it in priority queues. Verifying the QoS policy ensures that voice packets are treated with the necessary urgency to maintain low latency and jitter.

Answer

Application definitions

Answer

Security policy

Answer

Path selection policy

Question 4

A network operations team is troubleshooting a Prisma SD-WAN network where a specific branch site is experiencing poor voice quality. The team suspects that the issue is due to the branch's WAN link not meeting the required SLA for jitter. Which tool in the Prisma SD-WAN orchestrator should the team use to verify the real-time jitter measurements for the branch's WAN link?

Accepted Answer

The 'Link Quality' report under the device's Monitoring tab.. The Link Quality report is specifically designed to show real-time and historical performance metrics for WAN links, including jitter, latency, and packet loss. For troubleshooting voice quality issues, this report allows the team to confirm whether the branch's WAN link is meeting the required SLA for jitter.

Answer

The 'Flow Analytics' section in the orchestrator.

Answer

The 'Application Dashboard' under Monitoring.

Answer

The 'Alarms' tab under the device's Monitoring section.

Question 5

A network engineer is investigating why a branch site is not receiving any traffic from the data center after a recent change. The engineer suspects that the SD-WAN fabric is not advertising the branch's subnet correctly. Which CLI command on the ION device can be used to verify the routes being advertised to and received from the SD-WAN fabric?

Accepted Answer

show sdwan route. The SD-WAN fabric maintains its own routing table that includes prefixes advertised by each site. The 'show sdwan route' command reveals these fabric routes, enabling the engineer to confirm whether the branch's subnet is being advertised and whether the branch is learning data center routes. This directly addresses the suspected routing advertisement issue.

Answer

show ip route

Answer

show arp

Answer

show bgp summary

Question 6

A network operations team is troubleshooting a Prisma SD-WAN environment where multiple sites are reporting intermittent connectivity to critical cloud applications. The team suspects an issue with the SD-WAN fabric's path selection or link quality. Which two actions should the team perform to gather the most relevant data for diagnosis? (Choose two.)

Accepted Answer

Check the Event Log for path selection changes and link state transitions.. To diagnose intermittent connectivity to cloud applications, the team should focus on data that reveals path quality and selection decisions. The Application Dashboard provides per-application latency, jitter, and loss, while the Event Log shows path changes and link transitions. Together, they offer a comprehensive view of the SD-WAN fabric's behavior, enabling correlation between performance degradation and path selection events.

Answer

Verify the BGP peering status on all ION devices to ensure routing adjacencies are stable.

Answer

Restart the ION devices at the affected sites to clear any transient issues.

Answer

Run a packet capture on the ION device's WAN interface to analyze all traffic.

Question 7

A network engineer is troubleshooting a Prisma SD-WAN deployment where a new ION device at a remote site fails to establish any data plane tunnels to other sites. The engineer has verified that the control connection to the controller is up and the device is showing as 'Connected' in the orchestrator. Which step should the engineer take next to diagnose the data plane tunnel issue?

Accepted Answer

Verify that the device's WAN interfaces have the correct IP addresses and are not behind a NAT that blocks IPsec.. Data plane tunnels in Prisma SD-WAN are IPsec-based. Even if the control connection is up, IPsec tunnels can fail to establish due to NAT devices that do not properly handle IPsec traffic or due to incorrect WAN interface configurations. Verifying these elements is a direct way to diagnose the issue.

Answer

Restart the ION device to force re-establishment of tunnels.

Answer

Check the device's local routing table for a default route.

Answer

Review the controller's logs for errors related to the device.

Question 8

A network administrator is troubleshooting an ION device that is experiencing intermittent packet loss on its WAN interface. The administrator wants to determine whether the issue is due to physical layer errors or congestion. Which CLI command provides the most detailed statistics for identifying such problems?

Accepted Answer

show interface counters. Intermittent packet loss can stem from physical layer problems or congestion. The 'show interface counters' command provides detailed statistics such as CRC errors, input/output drops, and queue overruns. These metrics allow the administrator to determine whether the loss is due to cabling issues, duplex mismatches, or bandwidth saturation, enabling targeted remediation.

Answer

show interface

Answer

show system status

Answer

show log system

Question 9

A network engineer is analyzing a Prisma SD-WAN network where a critical SaaS application is experiencing intermittent performance degradation. The engineer suspects that the SD-WAN policy is not correctly steering traffic to the optimal path. Which feature in the Prisma SD-WAN orchestrator should the engineer use to verify the path selection decisions made for the application's traffic flows?

Accepted Answer

The 'Flow Analytics' dashboard, filtering by the application and viewing the 'Path' column.. Flow Analytics is the tool designed to provide granular visibility into traffic flows, including the path each flow takes. By filtering for the specific SaaS application, the engineer can directly observe the path selection decisions and determine if the SD-WAN policy is steering traffic optimally.

Answer

The 'Alarms' tab, looking for path selection alerts.

Answer

The 'Link Quality' report, checking the jitter and latency for each WAN link.

Answer

The 'Application Dashboard' under Monitoring, sorting by bandwidth usage.

Question 10

A network administrator is examining the Prisma SD-WAN orchestrator dashboard to identify which sites are consuming the most bandwidth. Which dashboard widget should the administrator use to quickly see the top bandwidth consumers?

Accepted Answer

Top Sites. The orchestrator dashboard provides several widgets for monitoring network traffic. To identify the top bandwidth-consuming sites, the 'Top Sites' widget is specifically designed to rank sites by their bandwidth usage. This allows administrators to quickly pinpoint sites that may require attention, such as those with unusually high traffic or potential bottlenecks.

Answer

Top Interfaces

Answer

Top Applications

Answer

Top Flows

Question 11

A network engineer is troubleshooting why a branch ION device is not receiving any traffic from the data center. The engineer suspects that a firewall rule on the ION device is blocking traffic. Which log should the engineer check to see if traffic is being dropped by the firewall?

Accepted Answer

Firewall log. The Firewall log is the correct choice. It specifically logs traffic that matches firewall rules, including denies. By examining this log, the engineer can see if traffic from the data center is being dropped and which rule is responsible. This is a fundamental step in troubleshooting firewall-related connectivity issues.

Answer

Traffic log

Answer

Event log

Answer

System log

Question 12

A network administrator is troubleshooting a Prisma SD-WAN environment where an ION device is experiencing intermittent packet loss on a business-critical application. The administrator suspects that the issue is related to a policy misconfiguration. Which two actions should the administrator take to verify that the correct policies are being applied to the traffic? (Choose two.)

Accepted Answer

Use the Flow Analytics dashboard to examine the path and policy applied to the specific application flow.. To verify that the correct application policies are applied, the administrator should review the policy stack order to ensure no shadowing occurs and use Flow Analytics to inspect the actual policy and path for the specific flow. These actions directly confirm whether the intended policy is enforced, which is crucial for troubleshooting intermittent packet loss caused by policy misconfiguration.

Answer

Check the ION device's system logs for policy deny messages.

Answer

Verify that the ION device has the latest software version installed.

Answer

Run a traceroute from the ION device to the application server to identify the path taken.

Question 13

A network operations center (NOC) engineer is monitoring a Prisma SD-WAN deployment and notices that one ION device at a remote site is consistently showing high latency on its broadband link, while the LTE link is performing well. The engineer wants to quickly identify whether the high latency is due to an ISP issue or a device problem. Which of the following should the engineer check first?

Accepted Answer

The Prisma SD-WAN Controller's path quality metrics for the broadband link.. The Prisma SD-WAN Controller continuously monitors path quality for each WAN link, providing latency, jitter, and loss metrics. By comparing the controller's measurements with the device's local observations, the engineer can quickly ascertain whether the high latency is consistent across the path (indicating an ISP issue) or isolated to the device (suggesting a local problem). This is the most efficient first step.

Answer

The ION device's CPU utilization and memory usage.

Answer

The ION device's interface statistics for errors and discards.

Answer

The broadband ISP's public status page for outages.

Question 14

A network engineer is troubleshooting a Prisma SD-WAN environment where a branch site is experiencing intermittent connectivity to a critical cloud application. The engineer suspects that the issue is related to the SD-WAN fabric's handling of the application's traffic. Which of the following tools should the engineer use to capture and analyze the actual packets traversing the ION device to determine if packets are being dropped or modified?

Accepted Answer

The ION device's built-in packet capture utility, accessible via the CLI.. To determine if packets are being dropped or modified, the engineer needs to capture and analyze the actual packets. The ION device's built-in packet capture utility allows for this level of detail, enabling inspection of headers and payloads. Other tools like Flow Analytics or system logs provide summarized or event-based information but lack the granularity of raw packet captures.

Answer

The Prisma SD-WAN Orchestrator's topology view.

Answer

The ION device's system logs.

Answer

The Prisma SD-WAN Controller's Flow Analytics dashboard.

Question 15

A network engineer is investigating a performance issue in a Prisma SD-WAN environment where an ION device is showing high jitter on a business-critical VoIP call. The engineer has verified that the WAN link quality is good and that no policies are misconfigured. The engineer suspects that the issue might be due to the ION device's handling of the traffic. Which of the following should the engineer check next to determine if the ION device is correctly marking and prioritizing the VoIP traffic?

Accepted Answer

The ION device's QoS configuration, specifically the mapping of VoIP traffic to the correct queue.. High jitter on VoIP traffic, despite good WAN link quality, often points to QoS misconfiguration. The ION device's QoS settings determine how VoIP packets are classified, marked, and queued. If they are not placed in a low-latency queue, jitter can occur. Therefore, checking the QoS configuration is the most direct next step to ensure proper prioritization.

Answer

The ION device's CPU utilization to see if it is overloaded.

Answer

The ION device's interface statistics for errors and discards on the VoIP VLAN.

Answer

The ION device's routing table to ensure the VoIP traffic is taking the correct path.