Planning And Design

A logistics company is designing Prisma SD-WAN for a hub-and-spoke topology with a primary data center and a secondary data center for disaster recovery. The design must ensure that branch traffic reaches the primary data center under normal conditions and automatically uses the secondary data center if the primary becomes unreachable. Which two design elements are required to meet these requirements? (Choose two.)

A network architect is designing a Prisma SD-WAN deployment for a retail chain with 400 small branches. Each branch has a single broadband circuit and a 4G/LTE backup. The design must minimize hardware cost at the branch while still supporting the SD-WAN fabric. Which ION device deployment approach best fits this requirement?

An energy company is planning a Prisma SD-WAN design for a remote drilling site that has intermittent satellite connectivity and only occasional on-site staff. The design must minimize on-site configuration effort and ensure the device can be replaced by non-technical personnel if it fails. Which design approach best meets these constraints?

A network architect is planning a Prisma SD-WAN deployment for a company with 20 branch offices. The company wants to ensure that if a branch's primary internet circuit fails, traffic automatically switches to a secondary LTE circuit. Which Prisma SD-WAN feature should be configured to meet this requirement?

What are the primary benefits of implementing a hub-and-spoke design with Prisma SD-WAN? (Choose THREE)

During pre-deployment planning for a high-security site, you must implement an identity-aware firewall policy. Where is this configuration mapped in the Prisma SD-WAN Controller?

A multinational enterprise is designing a Prisma SD-WAN deployment across 50 sites in North America, Europe, and Asia. The company wants to ensure that each region uses a local Prisma SD-WAN Controller to reduce management latency, while still allowing global policy enforcement. Which design approach should you recommend?

A multinational corporation is planning a Prisma SD-WAN deployment across 500 sites in multiple regions. The design must ensure that traffic from branch users to SaaS applications like Microsoft 365 is directed to the nearest Point of Presence (PoP) for optimal performance, while traffic to internal data centers is backhauled. Which Prisma SD-WAN feature should be leveraged to achieve this?

Which Prisma SD-WAN tool is used to monitor real-time health and performance of the SD-WAN fabric during the deployment phase?

A financial institution is designing a Prisma SD-WAN deployment across 40 branches and two data centers. The design must ensure that branch-to-branch traffic takes the most efficient path and that the network can automatically recover from a data center failure. Which two design elements should be included? (Choose two.)

When planning for a large-scale deployment, which items are required for the initial site information gather? (Choose THREE)

What is the purpose of the 'site-id' in the Prisma SD-WAN branch configuration?

Which protocol is utilized for the auto-discovery of Prisma SD-WAN Gateways during site provisioning?

A financial services company is designing a Prisma SD-WAN topology for a data center that hosts a trading application. The application requires sub-10 ms latency to a specific colocation facility and must not traverse any public internet path. The design team needs to enforce this requirement across all branches. Which Prisma SD-WAN design approach should be used?

A network architect is planning a Prisma SD-WAN deployment for a company with 200 sites. The company wants to ensure that each site's WAN interfaces are correctly identified and that policies can be applied based on site-specific attributes. Which Prisma SD-WAN configuration element should be used to uniquely identify each site and associate it with its WAN interfaces?

When designing a multi-tenant environment, how does the Prisma SD-WAN Controller ensure that management traffic is separated for each entity?

Which Prisma SD-WAN interface is used to connect to the local LAN?

Which Prisma SD-WAN feature enables the automatic configuration of security parameters for a new gateway?

A branch office uses both MPLS and Broadband. The design requires that business-critical traffic prefers MPLS, failing over to Broadband only if the MPLS path experiences packet loss exceeding 1%. Which metric should the PFR policy utilize?

You need to ensure that branch office voice traffic always has the lowest latency. Which QoS classification strategy is recommended?

Which of the following are valid transport types that can be defined in a Prisma SD-WAN site configuration? (Choose TWO)

A manufacturing company is designing its Prisma SD-WAN topology. The design team wants a simple hub-and-spoke model where all branch-to-branch traffic flows through the data center hub for inspection. Which topology design should be specified in the fabric?

Which criteria can be used to steer traffic in a Performance Routing policy? (Choose TWO)

A design team is planning the underlay for a Prisma SD-WAN branch that will use two independent internet circuits plus an LTE link. They must decide which transport configuration characteristics to document for the ION device. (Choose two.)

You are designing a Prisma SD-WAN deployment for a retail chain with 300 small branch sites. Each site has a single broadband link and a 4G/LTE backup. The customer requires that the SD-WAN fabric automatically detect when the primary link degrades and switch traffic to the backup without manual intervention. Which Prisma SD-WAN feature should you include in the design to meet this requirement?

What is the primary function of the CloudBlades platform in the Prisma SD-WAN architecture?

A financial services firm is designing Prisma SD-WAN for a data center that must advertise its internal subnets to the SD-WAN fabric. The design requires dynamic route exchange with the SD-WAN Controller and automatic propagation of learned routes to branch sites. Which routing approach should be specified on the data center CPE?

A healthcare organization is designing a Prisma SD-WAN deployment for 80 clinics. Each clinic has two broadband circuits from different ISPs. The design must ensure that if one circuit fails, all traffic automatically reroutes to the other circuit without manual intervention, and that the SD-WAN fabric continuously monitors both paths. Which Prisma SD-WAN feature should be included in the design to meet these requirements?

A hospital network team is planning a Prisma SD-WAN rollout and needs to confirm which component is responsible for maintaining the authoritative configuration and distributing policy to all ION devices across 60 clinics. Which component performs this role?

You are designing branch connectivity for a manufacturer that requires deterministic failover between a primary MPLS circuit and a secondary internet circuit, and the security team mandates that traffic to a specific PCI-scoped subnet be inspected by a next-generation firewall appliance sitting inline at the branch. Which two Prisma SD-WAN design elements must you include to meet these requirements? (Choose two.)

Which factors should be considered when designing the placement of a regional hub in a Prisma SD-WAN architecture? (Choose TWO)

Which are valid methods to connect a branch to the SD-WAN fabric? (Choose TWO)

A global enterprise is designing Prisma SD-WAN for regions with limited bandwidth and high latency. The design must ensure that voice traffic receives priority over bulk data transfers and that the WAN links are not oversubscribed. Which combination of design elements should be included in the plan?

An engineer is designing a Prisma SD-WAN topology for a company with a primary data center, a secondary data center, and 200 branches. The requirement is that branch-to-data-center traffic must traverse the primary data center under normal conditions and only use the secondary data center if the primary becomes unreachable. Which design element should be used to express this preference?

A design team is planning a Prisma SD-WAN deployment for a manufacturing company with 25 factories. Each factory has industrial control systems that must remain isolated from corporate IT traffic, and the company wants to avoid extending Layer 2 across the WAN. Which two design elements should be included in the plan? (Choose two.)

You are designing a Prisma SD-WAN solution for a multinational enterprise with sites in North America, Europe, and Asia. The company wants to ensure that real-time voice traffic is prioritized over bulk data transfers across the SD-WAN fabric. Which two design elements should you include to achieve this? (Choose two.)

A global enterprise is designing Prisma SD-WAN for regions with unreliable broadband. The design must ensure that if the primary WAN transport degrades beyond acceptable thresholds, traffic automatically moves to the secondary transport without manual intervention. Which design element should be specified?

In the context of the SD-WAN Controller, what does the 'Template' object represent?

In a multi-tenant Prisma SD-WAN design, what can be partitioned per tenant? (Choose THREE)

A retail customer needs to prioritize POS (Point of Sale) traffic over guest WiFi. Which policy type governs this bandwidth allocation?

When integrating Prisma SD-WAN with a cloud-based security service provider (CSSP) via CloudBlades, which setting must be verified to ensure proper traffic redirection?

A network architect is designing a Prisma SD-WAN deployment for a retail chain with 300 small branch sites, each with two broadband circuits and no MPLS. The design must ensure that if a branch's active tunnel degrades, traffic fails over within a few seconds without requiring BGP reconvergence. Which ION device configuration element should be included in the design to meet this requirement?

A network engineer is planning a Prisma SD-WAN deployment for a small office with a single broadband circuit and a 4G/LTE modem for backup. The office needs to maintain connectivity to cloud applications even when the broadband circuit fails. Which design approach should the engineer use?

A network engineer is planning the Prisma SD-WAN deployment for a new campus site. The site will use two ISP circuits and must support direct internet breakout for guest traffic while keeping corporate traffic on the VPN overlay. Which site configuration element is required to enable this design?

Which aspects of a site's network are required for configuring the SD-WAN Controller? (Choose TWO)

A site deployment requires specific traffic to be exempted from the SD-WAN optimization process to ensure compatibility with a legacy application. Which policy should be updated?

During a Prisma SD-WAN design review, a team must decide how branch users will authenticate to the corporate identity provider for policy-based access to SaaS applications, without deploying a separate identity appliance at each branch. Which design approach should be recommended?

A network architect is designing a branch site deployment requiring sub-second failover. Which Prisma SD-WAN component must be configured to prioritize real-time traffic across multiple transport paths based on path quality metrics?

A company is designing a Prisma SD-WAN deployment for a branch that has a single MPLS circuit and a single internet circuit. The design requires that voice traffic use MPLS and fail over to internet only if MPLS latency exceeds 150 ms. Which Prisma SD-WAN policy configuration should be used to meet this requirement?

A multinational enterprise is designing a Prisma SD-WAN topology with hubs in North America, Europe, and Asia. The design requires that branch-to-branch traffic within the same region use direct tunnels, while inter-region traffic must traverse a regional hub for security inspection. Which Prisma SD-WAN design element should be used to enforce this traffic flow?

When implementing a CloudBlade for a cloud security service, what must be configured? (Choose THREE)

A network architect is planning a Prisma SD-WAN deployment for a retail chain with 400 small branches. Each branch will have two broadband circuits from different providers and must be able to fail over to a cellular modem during an outage. The architect wants to minimize hardware footprint and central management overhead. Which design element should be included in the plan to meet these requirements?

A financial services company is designing a Prisma SD-WAN deployment for its headquarters and 50 branch offices. The security team requires that all traffic from branches to the internet be inspected by a cloud-based security service without backhauling to headquarters. Which Prisma SD-WAN design element should you use to meet this requirement?

A company is designing a Prisma SD-WAN deployment for its data center and 100 branches. The design team needs to ensure that the data center can provide high availability and that branch traffic is securely encrypted. Which two design elements should be included to meet these requirements? (Choose two.)

When setting up a branch, you need to define the 'Underlay' transport. What does this refer to?

Which types of traffic should ideally be prioritized via QoS policies? (Choose TWO)

A healthcare organization is designing a Prisma SD-WAN deployment for 25 clinics. Each clinic will have two broadband circuits and a single ION device. The security team requires that all internet-bound traffic from the clinics be inspected by a cloud-delivered security service, and that traffic be automatically rerouted if the primary circuit degrades. Which design element should the engineer include to meet these requirements?

A healthcare organization is planning a Prisma SD-WAN design for its clinics. The design must ensure that each clinic can reach the internet directly for guest traffic while also reaching internal applications through the SD-WAN fabric. Which two design elements should be included in the site configuration? (Choose two.)

An enterprise is designing Prisma SD-WAN for a data center that hosts business-critical applications. The design requires that traffic from branch sites to these applications be steered over a specific set of high-performance circuits, while all other internet-bound traffic uses a different set of circuits. The solution must be scalable and not require per-application static routes on every branch device. What should be used in the design?

You are designing a hub-and-spoke topology where spokes need to communicate directly under specific conditions. Which feature should be enabled to optimize latency and minimize load on the regional hub?

A customer requires a granular segmentation strategy where HR, Engineering, and Guest traffic must remain isolated across the SD-WAN fabric. Which configuration construct provides this logical separation?

A retail company is deploying Prisma SD-WAN at 300 branch sites. The design team wants to minimize the number of IP addresses used on the WAN side of each branch and avoid manually configuring static IPs on every CPE. Which WAN interface addressing method should be specified in the site design to meet these requirements?

You want to audit who changed a policy on the Controller. Where is this information logged?

You are designing an SD-WAN path for a high-bandwidth application that is sensitive to out-of-order packets. Which configuration setting minimizes packet reordering in a multi-path environment?

During the design of a large-scale data center migration, you need to extend Layer 2 domains across the SD-WAN fabric. Which mechanism supports this requirement?

A design team is planning a Prisma SD-WAN rollout and needs to document how branch sites will learn routes to remote subnets without manually defining every prefix. They want the fabric to automatically exchange reachability information between sites. Which capability should the design rely on?

Which of the following are components of the Prisma SD-WAN Controller interface? (Choose TWO)

A financial services company is designing a Prisma SD-WAN deployment with strict compliance requirements. The design must ensure that branch-to-branch traffic carrying cardholder data is encrypted end-to-end and that the SD-WAN fabric can prove which path was used for auditing. Which combination of Prisma SD-WAN features should be included in the design?

A financial services firm is designing Prisma SD-WAN for a hub-and-spoke topology where 25 regional offices connect to two data centers. The design must ensure that if a regional office loses its primary path to Data Center A, traffic can reach Data Center B without requiring a full mesh of tunnels between every branch pair. Which Prisma SD-WAN capability should the design rely on?

A healthcare provider is planning a Prisma SD-WAN rollout across 80 clinics. Each clinic has two broadband circuits from different ISPs and a requirement that telehealth video traffic maintain latency below 100 ms and jitter below 30 ms. The design must automatically steer telehealth traffic to the best-performing circuit and fail over if thresholds are breached. Which Prisma SD-WAN design element is required?

A company is migrating to a cloud-native architecture. How does Prisma SD-WAN support multi-cloud connectivity?