Palo Alto Networks SD-WAN Engineer - SD-WAN-Engineer FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

An organization has created a custom internal application definition for "Inventory_App" on the Prisma SD- WAN controller based on its destination IP address and port (L3/L4 rule). The application server IP has just changed.
After updating the custom application definition on the controller, how is this change propagated to the branch ION devices?

A. The change will only take effect after the daily "App-ID" scheduled update. B. The administrator must manually "Push" the policy to all sites. C. The administrator must reboot the ION devices for the new object to load. D. The controller automatically pushes the updated Application Definition (App-Def) to all ION devices immediately.

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 2

A branch manager reports slow network performance, and the network administrator wants to use Prisma SD- WAN Copilot to quickly identify if a specific user, by source IP address, is consuming excessive bandwidth as well as which applications are contributing to this consumption. How can Copilot assist in this investigation?

A. It can identify the top applications being used across the entire branch and can be correlated with Flow Browser to attribute specific application usage or total bandwidth consumption to individual source IPs. B. It can directly process a natural language query such as "Show top bandwidth source IPs at SD-WAN Branch X over last 3 hours," provide summarized views of the top-consuming source IPs, and view the primary applications they are using. C. It will automatically generate and email a "User Bandwidth Consumption" report for the specified branch, which the administrator can use to find the top user and the application details. D. It will redirect the administrator to the WAN Clarity "Top N: Source IPs" report and the "Flow Browser" utility, suggesting correlation between these tools to determine a user's specific application usage.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 3

An administrator is configuring a High Availability (HA) pair of ION 3000 devices at a Data Center.
Which statement accurately describes the requirement for the HA Control Interface connection between the two devices?

A. The HA Control connection is optional if both devices are managed by the same Cloud Controller. B. The HA Control interface uses the management port and must be connected to the internet. C. The HA Control interface must be connected via a Layer 3 routed network to ensure reachability across different subnets. D. The HA Control interface must be a direct physical connection or a Layer 2 adjacent connection on a dedicated VLAN, with no routing between them.

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 4

There are periodic complaints about the poor performance of a real-time application.

What can be inferred about the performance issue, based on the Network Transfer Time (NTT) and Server Response Time (SRT) image below?

A. The SRT value increases periodically due to Application Server side issues. B. The SRT value drops periodically due to Application Server side issues. C. The NTT value drops periodically due to network related issues. D. The NTT value increases periodically resulting in higher SRT.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 5

During the Zero Touch Provisioning (ZTP) process of a new ION device at a branch site, which interface ports are supported by default to request an IP address via DHCP and reach the Prisma SD-WAN controller for claiming?

A. The dedicated Controller port, or Port 1 / Internet 1 if a dedicated port is absent B. Only the dedicated Controller port (if available) C. Only the USB port via a cellular modem D. Any LAN or WAN port on the device

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 6

A network administrator notices that a branch ION device is experiencing high CPU utilization due to a suspected TCP SYN Flood attack originating from a compromised host on the local LAN.
Which specific security feature should be configured and applied to the "LAN" zone to mitigate this Denial of Service (DoS) attack?

A. Access Control List (ACL) on the WAN interface B. Zone-Based Firewall (ZBFW) Rule with a "Deny" action C. Application Quality Profile (AQP) D. Zone Protection Profile

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 7

When allocating Aggregate Bandwidth for a Prisma Access "Remote Network" deployment (connecting 50 branch sites), how is the bandwidth license enforced?

A. The bandwidth license is only checked once during the initial onboarding; there is no ongoing enforcement. B. The bandwidth is allocated per device serial number and cannot be shared. C. The bandwidth is shared as a pool across all sites in a specific Compute Location (Region); individual sites can burst up to the available pool capacity. D. Each branch site is hard-capped at the specific bandwidth limit defined in its individual IPSec tunnel configuration.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 8

When configuring a Path Policy rule for a "Real-Time Video" application, the administrator wants to ensure the traffic uses the path with the lowest packet loss.
How does the Prisma SD-WAN ION determine the "Packet Loss" metric for a given path when there is no active user traffic flowing on that link?

A. It sends Active Probes (synthetic UDP packets) across the Secure Fabric to measure path quality continuously. B. It queries the ISP's router via SNMP to retrieve interface error counters. C. It relies solely on Passive Monitoring of TCP retransmissions from other user traffic on that link. D. It defaults to a static value of 0% loss until user traffic begins.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 9

What is the default behavior of the Zone-Based Firewall (ZBFW) for traffic originating from the ION device itself (e.g., DNS queries, NTP sync, or Controller connectivity) destined for the "Internet" zone?

A. It is allowed only if the "Management" interface is used. B. It is inspected by the "Global" security stack but bypasses local rules. C. It is denied by the default "Deny All" rule unless explicitly allowed. D. It is allowed by the implicit "Self-Zone" allow rule.

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).