Weekend Sale Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: merry71

Free Palo Alto Networks SD-WAN Engineer Practice Questions

Question # 1

Which component of the Prisma SD-WAN solution is responsible for the deep application identification (App-ID) and the generation of flow metrics (Network Transfer Time, Server Response Time) at the branch?

Options:

A.  

 The CloudBlade container

B.  

 The Prisma SD-WAN Controller

C.  

 The ION Device Data Plane

D.  

 The API Gateway

Discussion 0
Question # 2

A network engineer is troubleshooting a user complaint regarding "slow application performance" for an internal web application. While viewing the Flow Browser in the Prisma SD-WAN portal, the engineer notices that the Server Response Time (SRT) is consistently high (over 500ms), while the Network Transfer Time (NTT) and Round Trip Time (RTT) are low (under 50ms).

What does this data indicate about the root cause of the issue?

Options:

A.  

The issue is likely caused by congestion on the WAN circuit, requiring a QoS policy adjustment.

B.  

The issue is likely on the application server itself (e.g., high CPU, slow database query), not the network.

C.  

The issue is caused by a high packet loss rate on the internet path.

D.  

The issue is due to a misconfigured DNS server at the branch.

Discussion 0
Question # 3

Which implementation allows Prisma SD-WAN to improve application performance for organizations facing inconsistent user experiences across branch locations, especially due to varying device types and network conditions, by using Layer 4 and Layer 7 optimization to boost throughput?

Options:

A.  

Packet duplication

B.  

WAN optimization

C.  

Forward Error Correction (FEC)

D.  

Application acceleration

Discussion 0
Question # 4

When an ION device has been claimed, the cloud-based controller generates and communicates with the device by which method?

Options:

A.  

Manufacturer Installed Certificate (MIC)

B.  

Existing customer public key infrastructure (KPI)

C.  

Self-signed certificate

D.  

Customer Installed Certificate (CIC)

Discussion 0
Question # 5

BGP core peers on data center IONs are learning only a default route from the core router. Which action will protect the SD-WAN network from getting isolated in the event of BGP misconfiguration on the core routers?

Options:

A.  

Enable BGP Bidirectional Forwarding Detection (BFD) on the core peer sessions to rapidly detect BGP neighbor failures.

B.  

Configure BGP max-prefix limits on the ION devices to prevent them from accepting too many routes from the core routers.

C.  

Add a static default route with higher admin distance pointing to the core peer IPs.

D.  

Implement BGP route filtering using prefix lists and route maps on the ION devices to only accept specific, known prefixes from the core.1

Discussion 0
Question # 6

A network installer is attempting to claim a new ION device using the "Claim Code" method. The device is connected to the internet, but the status in the portal remains stuck at "Claimed" and does not transition to "Online". The installer connects a laptop to the LAN port of the ION and can successfully browse the internet, confirming the uplink is active.

What is the most likely cause of the device failing to reach the "Online" state?

Options:

A.  

 The device is missing the "Site" assignment in the portal.

B.  

 The upstream firewall is blocking outbound TCP port 443 or UDP port 123 (NTP).

C.  

 The device has not yet downloaded the latest software image.

D.  

 The "Circuit Label" has not been applied to the WAN interface.

Discussion 0
Question # 7

A site has two internet circuits: Circuit A with 500 Mbps capacity and Circuit B with 100 Mbps capacity.

Which path policy configuration will ensure traffic is automatically shifted from a saturated circuit to the circuit with available bandwidth?

Options:

A.  

Circuit A as an active, Circuit B as a backup

B.  

Circuit B as an active, Circuit A as a backup

C.  

Both circuits under active path

D.  

Circuit B as an L3 failure path

Discussion 0
Question # 8

A customer wants to deploy Prisma SD-WAN ION devices at small home offices that use consumer-grade broadband routers. These routers typically use Symmetric NAT and do not allow static port forwarding.

Which standard mechanism does Prisma SD-WAN utilize to successfully establish direct Branch-to-Branch (Dynamic) VPN tunnels through these Symmetric NAT devices?

Options:

A.  

 UPnP (Universal Plug and Play)

B.  

 STUN (Session Traversal Utilities for NAT)

C.  

 Manual GRE Tunnels

D.  

 SSL VPN encapsulation

Discussion 0
Question # 9

Which troubleshooting step should be taken when users at a branch site are experiencing a maximum throughput of 200 Mbps for Direct Internet Access (DIA) traffic on a 1 Gbps internet connection?

Options:

A.  

Ensure QoS policy is applies to the site.

B.  

Ensure the WAN interface is set to 1 Gbps or auto mode.

C.  

Ensure performance policy is applied to the site.

D.  

Ensure the circuit configuration at the site level is properly set.

Discussion 0
Question # 10

Which configuration requirement must be met to allow two branch ION devices to automatically establish a direct Dynamic VPN (branch-to-branch) connection for traffic flow, bypassing the Data Center?

Options:

A.  

Both ION devices must be members of the same VPN Cluster.

B.  

A static "Gre Tunnel" must be manually configured between the two sites.

C.  

The Data Center ION must be offline to trigger the dynamic failover.

D.  

The "Standard VPN" path policy must be selected.

Discussion 0

SD-WAN-Engineer PDF

SD-WAN-Engineer PDF (Printable)
$46.5
$154.99

SD-WAN-Engineer Testing Engine

SD-WAN-Engineer PDF (Printable)
$51
$169.99

SD-WAN-Engineer PDF + Testing Engine

SD-WAN-Engineer PDF (Printable)
$63.9
$212.99
Exams4sure Dumps

Exam style questions across every SD-WAN-Engineer domain

Last Update 3 days ago
Total Questions : 86

Start with our free SD-WAN-Engineer practice questions, carefully crafted to mirror the domains, phrasing, and difficulty of the real Network Security exam. Each SD-WAN-Engineer exam question comes with a detailed rationale that explains not just which answer is correct but why the others fall short. That's how concepts stick. Use the free set to benchmark yourself: identify your Paloalto Networks weak domains, see where you're losing marks, and build a focused study plan in minutes.

Free Exams Sample Questions