Palo Alto Networks SD-WAN-Engineer - Palo Alto Networks SD-WAN Engineer Exam
Page: 3 / 14
Total 70 questions
Question #11 (Topic: Exam A)
In which modes can a Prisma SD-WAN branch be deployed?
A. Testing, Control, POV
B. Production, Control, Disabled
C. Disabled, Analytics, Control
D. POV, Production, Analytics
Answer: C
Question #12 (Topic: Exam A)
What are two requirements for implementing user/group-based path policies? (Choose two.)
A. Cloud Identity Engine
B. Internal host detection
C. Autonomous Digital Experience Manager (ADEM)
D. Data center ION
Answer: AB
Question #13 (Topic: Exam A)
For how many hours are Prisma SD-WAN VPN shared secrets valid?
A. 1
B. 8
C. 24
D. 72
Answer: C
Question #14 (Topic: Exam A)
Which component of Prisma SD-WAN is responsible for distributing User-IP and user-group mappings to branch devices that match the corresponding source IPs?
A. DC ION
B. Cloud Identity Engine
C. Controller
D. NGFW
Answer: C
Question #15 (Topic: Exam A)
A multinational company is deploying Prisma SD-WAN across North America, Europe, and Asia. The data centers in the North America region have served all regions, but regional policies are now being enforced that mandate each of the regions to build their own data centers and branch sites to only connect to their respective regional data centers.
How can this regionalization be achieved so that new or existing branch sites only build tunnels to the regional DC IONs?
How can this regionalization be achieved so that new or existing branch sites only build tunnels to the regional DC IONs?
A. Create a new cluster for each regional DC ION and move the sites from the existing cluster to the new cluster.
B. Disable to auto-tunnel feature globally on the Prisma SD-WAN portal and manually create all necessary tunnels exclusively between IONs within their designated regions.
C. Remove the circuit labels and apply new circuit labels for in-region circuits only.
D. Assign WAN interfaces to distinct Virtual Routing and Forwarding (VRF) instances for each region on the DC IONs, ensuring that branches only connect to the WAN interfaces/VRFs designated for their region.
Answer: C
