Palo Alto Networks SD-WAN Engineer (SD-WAN-Engineer) Free Practice Test

Question 1

When an ION device has been claimed, the cloud-based controller generates and communicates with the device by which method?

A. Existing customer public key infrastructure (KPI)

B. Self-signed certificate

C. Customer Installed Certificate (CIC)

D. Manufacturer Installed Certificate (MIC)

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

What is the default action for real-time media applications if link performance is poor?

A. Move flows.

B. Apply Forward Error Correction (FEC).1

C. Drop the flow.

D. Raise an alarm.

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 3

Which specialized hardware feature is available on the ION 9000 series but NOT on the ION 3000 series, making it suitable for high-throughput Data Center deployments?

A. 10 Gigabit Ethernet (SFP+) ports

B. Fail-to-Wire Bypass Pairs

C. PoE+ (Power over Ethernet) output ports

D. Support for LTE/5G SIM cards

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 4

When planning a software upgrade for a large fleet of ION devices, what is the recommended best practice regarding the "Software Version" assigned in the Site Summary?

A. Use Site Tags to group sites (e.g., "Pilot", "Region-1", "Region-2") and assign the new software version incrementally to these tags to minimize risk.

B. Manually log into each device and upload the new image file via USB.

C. Assign the new software version to the "Global" site configuration to upgrade all 1000+ sites simultaneously.

D. The ION devices upgrade themselves automatically whenever a new version is released by Palo Alto Networks.

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

The UI triggers incident DEVICESW_CONCURRENT_FLOWLIMIT_EXCEEDED for a branch site. Based in the image below, which tool can be used to identify the host?

A. Monitor # Activity # Transaction Stats

B. Run tcpdump under the LAN interface

C. Monitor # Activity # Flows

D. Monitor # Activity # New flows

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 6

An administrator is configuring a High Availability (HA) pair of ION 3000 devices at a Data Center.
Which statement accurately describes the requirement for the HA Control Interface connection between the two devices?

A. The HA Control interface must be connected via a Layer 3 routed network to ensure reachability across different subnets.

B. The HA Control connection is optional if both devices are managed by the same Cloud Controller.

C. The HA Control interface uses the management port and must be connected to the internet.

D. The HA Control interface must be a direct physical connection or a Layer 2 adjacent connection on a dedicated VLAN, with no routing between them.

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 7

A network engineer is troubleshooting an ION device that is showing as "Offline" in the Prisma SD-WAN portal, despite the site reporting that local internet access is working. The engineer has console access to the device.
Which CLI command should be used to specifically validate the device's ability to resolve the controller's hostname and establish a secure connection to it over a specific interface?

A. debug controller reachability <interface>

B. dump vpn summary

C. show system connectivity

D. ping <controller-ip>

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 8

While designing a greenfield Prisma SD-WAN solution for a retailer, the risk management group requires segmentation of the retail network to avoid one large fault domain.
The following data points are provided:
* Two data centers and all sites need to access applications in both data centers
* 1000 retail branches with stores concentrated in multiple metropolitan areas
* Data Center 1 and Data Center 2 have different sets of applications that are not replicated
* Maintaining application availability is the primary goal
Which action will segment the retail network and reduce regional outages?

A. Create more than one data center cluster in each data center and assign sites to clusters so nearby retail locations can be spread on separate clusters.

B. Implement a single, large data center cluster spanning both data centers to centralize management and optimize resource use.

C. Create more than one data center cluster for a larger pool of resources and resiliency.

D. Add more data center aggregation devices within the same cluster to enhance the scalability and resilience.

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 9

In a data center (DC) with two ION devices, all of the remote branch Prisma SD-WAN VPNs are active only on DC ION-1.
Why are no VPNs active on DC ION-2?

A. The BGP core peer is down.

B. The static route to core as a next hop is missing.

C. The ION device is behind a NAT.

D. The DC and branches are in a different domain.

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Welcome to TestSimulate

Palo Alto Networks SD-WAN Engineer (SD-WAN-Engineer) Free Practice Test