20:00

PDF|

Guide for Palo Alto Networks SD-WAN Engineer

Quiz Palo Alto Networks SD-WAN Engineer

Free Test
/ 10

Quiz

1/10
When identifying devices for IoT classification purposes, which two methods does Prisma SD-WAN
use to discover devices that are not directly connected to the branch ION? (Choose two.)
Select the answer
2 correct answers
A.
LLDP
B.
CDP
C.
SNMP
D.
Syslog

Quiz

2/10
A network administrator is troubleshooting a critical SaaS application, “SuperSaaSApp”, that is
experiencing connectivity issues. Initially, the configured active and backup paths for the application
were reported as completely down at Layer 3. The Prisma SD-WAN system attempted to route traffic
for the application over an L3 failure path that was explicitly configured as a Standard VPN to Prisma
Access.
However, users are still reporting a complete outage for the application and monitoring tools show
application flows being dropped when attempting to use the Standard VPN L3 failure path, even
though the tunnel itself appears to be up. The administrator suspects a policy misconfiguration
related to how the Standard VPN path interacts with destination groups.
What is the most likely reason for flows being dropped when attempting to use the Standard VPN L3
failure path?
Select the answer
1 correct answer
A.
The “Move Flows Forced” action was not enabled in the performance policy for “SuperSaaSApp”, preventing the system from actively shifting traffic to the L3 failure path.
B.
The path policy rule for “SuperSaaSApp” has the “Required” checkbox selected for its Service & DC Group, but no direct paths were configured alongside it, creating a conflict.
C.
The path policy rule explicitly designates a Standard VPN as the L3 failure path, but it does not include a designated Standard Services and DC Group, causing traffic to be dropped.
D.
The Standard VPN in the path policy was not configured to “Minimize Cellular Usage”, leading to the depletion of metered data and subsequent flow drops.

Quiz

3/10
User-ID integration is configured for a Prisma SD-WAN deployment. Branch-1 has the user-to-IP
mappings available, and User-1 is mapped to IP-1.
To which two use cases can User-ID based zone-based firewall policies be applied? (Choose two.)
Select the answer
2 correct answers
A.
User-1 accessing a SaaS application on direct internet and source User-ID based zone-based firewall rules on Branch-1 ION
B.
User-1 accessing a private application within Branch-1, and source User-ID based zone-based firewall rules on Branch-1 ION
C.
User-1 accessing a private application in data center via SD-WAN overlay, and destination User-ID based zone-based firewall rules on DC ION
D.
User-1 accessing a private application in Branch-2 via SD-WAN overlay, and destination User-ID based zone-based firewall rules on Branch-2 ION

Quiz

4/10
A site has two internet circuits: Circuit A with 500 Mbps capacity and Circuit B with 100 Mbps
capacity.
Which path policy configuration will ensure traffic is automatically shifted from a saturated circuit to
the circuit with available bandwidth?
Select the answer
1 correct answer
A.
Circuit A as an active, Circuit B as a backup
B.
Circuit B as an active, Circuit A as a backup
C.
Both circuits under active path
D.
Circuit B as an L3 failure path

Quiz

5/10
What is the default action for real-time media applications if link performance is poor?
Select the answer
1 correct answer
A.
Drop the flow.
B.
Move flows.
C.
Apply Forward Error Correction (FEC).1
D.
Raise an alarm.

Quiz

6/10
Based on the HA topology image below, which two statements describe the end-state when power is
removed from the ION 1200-S labeled “Active”, assuming that the ION labeled “Standby” becomes
the active ION? (Choose two.)
Certification Exam Palo Alto Networks SD-WAN Engineer Palo Alto Networks Palo-Alto-Networks-SD-WAN-Engineer 1-2622730591
Select the answer
2 correct answers
A.
Both the connection to ISP A and the connection to LTE/5G will be usable.
B.
The VRRP Virtual IP address assigned to any SVIs will be moved to the newly active ION.
C.
The newly active ION will send a gratuitous ARP to the LAN for the IP address of any SVIs.
D.
The connection to ISP A will be usable, but the connection to LTE/5G will not.

Quiz

7/10
In a data center (DC) with two ION devices, all of the remote branch Prisma SD-WAN VPNs are active
only on DC ION-1.
Why are no VPNs active on DC ION-2?
Select the answer
1 correct answer
A.
The BGP core peer is down.
B.
The static route to core as a next hop is missing.
C.
The ION device is behind a NAT.
D.
The DC and branches are in a different domain.

Quiz

8/10
Which statement is valid when integrating Prisma SD-WAN with Prisma Access remote networks?
Select the answer
1 correct answer
A.
Security policies for remote networks are configured in Prisma Access and pushed to Prisma SD- WAN for enforcement on the branch ION devices.
B.
Easy onboarding automatically recommends the closest preconfigured remote network security processing nodes and can be overridden manually.
C.
A branch with multiple internet circuits will automatically connect to Prisma Access on each circuit and will be used in an active/standby manner for internet-bound traffic.
D.
Bandwidth must be allocated to each Prisma Access remote network compute location, and this bandwidth is shared between all branches that terminate on this remote network node.

Quiz

9/10
What are two potential causes when a secondary public circuit has been added to the branch site,
but the Prisma SD-WAN tunnel is not forming to the data center? (Choose two.)
Select the answer
2 correct answers
A.
Interface role is not selected as “internet.”
B.
Circuit label is missing from interface type.
C.
DNS is not configured.
D.
Interface scope is set to “local.”

Quiz

10/10
What is the number and structure of Prisma SD-WAN QoS queues supported per WAN interface?
Select the answer
1 correct answer
A.
12 queues 4 classes1 3 application criteria within each class
B.
16 queues 4 classes 4 application criteria with each class
C.
8 queues 1 priority queue 7 non-priority queues
D.
8 queues 2 classes 4 application criteria within each class
Looking for more questions?Buy now

Palo Alto Networks SD-WAN Engineer Practice test unlocks all online simulator questions

Thank you for choosing the free version of the Palo Alto Networks SD-WAN Engineer practice test! Further deepen your knowledge on Palo Alto Networks Simulator; by unlocking the full version of our Palo Alto Networks SD-WAN Engineer Simulator you will be able to take tests with over 57 constantly updated questions and easily pass your exam. 98% of people pass the exam in the first attempt after preparing with our 57 questions.

BUY NOW

What to expect from our Palo Alto Networks SD-WAN Engineer practice tests and how to prepare for any exam?

The Palo Alto Networks SD-WAN Engineer Simulator Practice Tests are part of the Palo Alto Networks Database and are the best way to prepare for any Palo Alto Networks SD-WAN Engineer exam. The Palo Alto Networks SD-WAN Engineer practice tests consist of 57 questions and are written by experts to help you and prepare you to pass the exam on the first attempt. The Palo Alto Networks SD-WAN Engineer database includes questions from previous and other exams, which means you will be able to practice simulating past and future questions. Preparation with Palo Alto Networks SD-WAN Engineer Simulator will also give you an idea of the time it will take to complete each section of the Palo Alto Networks SD-WAN Engineer practice test . It is important to note that the Palo Alto Networks SD-WAN Engineer Simulator does not replace the classic Palo Alto Networks SD-WAN Engineer study guides; however, the Simulator provides valuable insights into what to expect and how much work needs to be done to prepare for the Palo Alto Networks SD-WAN Engineer exam.

BUY NOW

Palo Alto Networks SD-WAN Engineer Practice test therefore represents an excellent tool to prepare for the actual exam together with our Palo Alto Networks practice test . Our Palo Alto Networks SD-WAN Engineer Simulator will help you assess your level of preparation and understand your strengths and weaknesses. Below you can read all the quizzes you will find in our Palo Alto Networks SD-WAN Engineer Simulator and how our unique Palo Alto Networks SD-WAN Engineer Database made up of real questions:

Info quiz:

  • Quiz name:Palo Alto Networks SD-WAN Engineer
  • Total number of questions:57
  • Number of questions for the test:50
  • Pass score:80%

You can prepare for the Palo Alto Networks SD-WAN Engineer exams with our mobile app. It is very easy to use and even works offline in case of network failure, with all the functions you need to study and practice with our Palo Alto Networks SD-WAN Engineer Simulator.

Use our Mobile App, available for both Android and iOS devices, with our Palo Alto Networks SD-WAN Engineer Simulator . You can use it anywhere and always remember that our mobile app is free and available on all stores.

Our Mobile App contains all Palo Alto Networks SD-WAN Engineer practice tests which consist of 57 questions and also provide study material to pass the final Palo Alto Networks SD-WAN Engineer exam with guaranteed success. Our Palo Alto Networks SD-WAN Engineer database contain hundreds of questions and Palo Alto Networks Tests related to Palo Alto Networks SD-WAN Engineer Exam. This way you can practice anywhere you want, even offline without the internet.

BUY NOW