NetSec-Architect Specialized Security Domains Practice Question
When designing branch networking with Prisma SD-WAN, an architect can configure multiple types of WAN interfaces. Which THREE WAN interface types are supported on Prisma SD-WAN ION devices? (Choose three)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Layer 3 Routed WAN interfaces.
Prisma SD-WAN supports various WAN interface types including Layer 3 routed, Layer 2 bridged, loopback, and cellular/LTE interfaces.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
GlobalProtect virtual tunnel interfaces (tunnel.1).
Why it's wrong here
GlobalProtect tunnel interfaces are exclusive to PAN-OS firewalls.
- ✓
Layer 3 Routed WAN interfaces.
Why this is correct
L3 routed interfaces connect ION devices to routers and ISPs.
- ✓
Layer 2 Bridged WAN interfaces.
Why this is correct
L2 bridged interfaces are supported for transparent branch handoffs.
- ✓
Cellular / LTE WAN interfaces (using plug-in or integrated modems).
Why this is correct
Cellular interfaces provide wireless backup or primary WAN links.
- ✗
Traditional PAN-OS Aggregate Group interfaces (ae0).
Why it's wrong here
ae0 interface naming is specific to PAN-OS firewalls, not Prisma SD-WAN ION devices.
About these practice questions
Courseiva writes every NetSec-Architect question from scratch — 228 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official Palo Alto Networks exam blueprint
This NetSec-Architect practice question is part of Courseiva's free Palo Alto Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NetSec-Architect exam.