SD-WAN-Engineer 試験問題を無料オンラインアクセス

Two branch sites, "Branch-A" and "Branch-B", are both behind active NAT devices (Source NAT) on their local internet circuits.
What requirement must be met for these two branches to successfully establish a direct Dynamic VPN (ION-to-ION) tunnel over the internet?

• A.Dynamic VPNs are not supported if both sides are behind NAT.
• B.One of the sites must have a Static Public IP (1:1 NAT) to act as the initiator.
• C.Both sites must disable NAT and use public IPs on the ION interface.
• D.The ION devices automatically use STUN (Session Traversal Utilities for NAT) to discover their public IPs and negotiate the connection.

Which statement is valid when integrating Prisma SD-WAN with Prisma Access remote networks?

• A.A branch with multiple internet circuits will automatically connect to Prisma Access on each circuit and will be used in an active/standby manner for internet-bound traffic.
• B.Security policies for remote networks are configured in Prisma Access and pushed to Prisma SD-WAN for enforcement on the branch ION devices.
• C.Bandwidth must be allocated to each Prisma Access remote network compute location, and this bandwidth is shared between all branches that terminate on this remote network node.
• D.Easy onboarding automatically recommends the closest preconfigured remote network security processing nodes and can be overridden manually.

What are two requirements for implementing user/group-based path policies? (Choose two.)

• A.Cloud Identity Engine
• B.Internal host detection
• C.Autonomous Digital Experience Manager (ADEM)
• D.Data center ION

Site templates are to be used for the large-scale deployment of 100 Prisma SD-WAN branch sites across different regions.
Which two statements align with the capabilities and best practices for Prisma SD-WAN site templates? (Choose two.)

• A.The use of Jinja conditional statements within a site template is not supported, thereby limiting dynamic customization options.
• B.Once a site has been deployed using a template, its configuration can be updated or modified by applying an updated version of the template.
• C.Site templates offer the capability to pre-stage device configurations by creating a device shell.
• D.Mandatory variables for any site template include the site name, ION software version, and at least one ION serial number /device name pair.

A network administrator is troubleshooting a critical SaaS application, "SuperSaaSApp", that is experiencing connectivity issues. Initially, the configured active and backup paths for the application were reported as completely down at Layer 3. The Prisma SD-WAN system attempted to route traffic for the application over an L3 failure path that was explicitly configured as a Standard VPN to Prisma Access.
However, users are still reporting a complete outage for the application and monitoring tools show application flows being dropped when attempting to use the Standard VPN L3 failure path, even though the tunnel itself appears to be up. The administrator suspects a policy misconfiguration related to how the Standard VPN path interacts with destination groups.
What is the most likely reason for flows being dropped when attempting to use the Standard VPN L3 failure path?

• A.The path policy rule explicitly designates a Standard VPN as the L3 failure path, but it does not include a designated Standard Services and DC Group, causing traffic to be dropped.
• B.The path policy rule for "SuperSaaSApp" has the "Required" checkbox selected for its Service & DC Group, but no direct paths were configured alongside it, creating a conflict.
• C.The Standard VPN in the path policy was not configured to "Minimize Cellular Usage", leading to the depletion of metered data and subsequent flow drops.
• D.The "Move Flows Forced" action was not enabled in the performance policy for "SuperSaaSApp", preventing the system from actively shifting traffic to the L3 failure path.