Free Palo Alto Networks SD-WAN-Engineer Exam Questions

Question 1

Based on the HA topology image below, which two statements describe the end-state when power is removedfrom the ION 1200-S labeled “Active”, assuming that the ION labeled “Standby” becomes the active ION?(Choose two.)

A : Both the connection to ISP A and the connection to LTE/5G will be usable.

B : The VRRP Virtual IP address assigned to any SVIs will be moved to the newly active ION.

C : The newly active ION will send a gratuitous ARP to the LAN for the IP address of any SVIs.

D : The connection to ISP A will be usable, but the connection to LTE/5G will not.

Answer: A,C

Question 2

A network engineer is troubleshooting a "Voice Quality" issue. They suspect that the DSCP markings arebeing stripped or altered by the ISP.Which tool in the Prisma SD-WAN portal allows the engineer to capture live packets on the WAN interfaceand inspect the IP header ToS/DSCP field?

A : Flow Browser

B : Packet Capture (PCAP)

C : Path Quality Monitor

D : Event Logs

Answer: B

Question 3

A multinational company is deploying Prisma SD-WAN across North America, Europe, and Asia. The datacenters in the North America region have served all regions, but regional policies are now being enforced thatmandate each of the regions to build their own data centers and branch sites to only connect to their respectiveregional data centers.How can this regionalization be achieved so that new or existing branch sites only build tunnels to theregional DC IONs?

A : Create a new cluster for each regional DC ION and move the sites from the existing cluster to the new cluster.

B : Disable the auto-tunnel feature globally on the Prisma SD-WAN portal and manually create allnecessary tunnels exclusively between IONs within their designated regions.

C : Remove the circuit labels and apply new circuit labels for in-region circuits only.

D : Assign WAN interfaces to distinct Virtual Routing and Forwarding (VRF) instances for each region onthe DC IONs, ensuring that branches only connect to the WAN interfaces/VRFs designated for theirregion.

Answer: A

Question 4

A multinational company is deploying Prisma SD-WAN across North America, Europe, and Asia. The datacenters in the North America region have served all regions, but regional policies are now being enforced thatmandate each of the regions to build their own data centers and branch sites to only connect to their respectiveregional data centers.How can this regionalization be achieved so that new or existing branch sites only build tunnels to theregional DC IONs?

A : Create a new cluster for each regional DC ION and move the sites from the existing cluster to the new cluster.

B : Disable the auto-tunnel feature globally on the Prisma SD-WAN portal and manually create allnecessary tunnels exclusively between IONs within their designated regions.

C : Remove the circuit labels and apply new circuit labels for in-region circuits only.

D : Assign WAN interfaces to distinct Virtual Routing and Forwarding (VRF) instances for each region onthe DC IONs, ensuring that branches only connect to the WAN interfaces/VRFs designated for theirregion.

Answer: A

Question 5

An administrator needs to ensure that critical VoIP traffic is not dropped even when the branch's primaryinternet link is fully saturated with bulk file transfers.Which QoS mechanism does Prisma SD-WAN automatically apply to the "Platinum" priority class to preventstarvation by lower-priority classes?

A : Strict Priority Queuing (SPQ)

B : Weighted Round Robin (WRR)

C : Hierarchical Token Bucket (HTB) with guaranteed bandwidth

D : First-In, First-Out (FIFO)

Answer: C