Free Palo Alto Networks SD-WAN-Engineer Exam Dumps Questions & Answers

Which action meets the needs of an organization that requires elevated incident notifications for its headquarters location?

• A.Enable an event policy rule for the site with the action to set priority to the highest available level.
• B.Implement performance policy specifically for the site with very aggressive service-level agreement (SLA) thresholds.
• C.Export syslog to an external syslog collector and mark all messages as "Critical."
• D.Enable SNMPv3 trap notifications to an external network management system.

What is the default behavior of the Zone-Based Firewall (ZBFW) for traffic originating from the ION device itself (e.g., DNS queries, NTP sync, or Controller connectivity) destined for the "Internet" zone?

• A.It is allowed only if the "Management" interface is used.
• B.It is inspected by the "Global" security stack but bypasses local rules.
• C.It is allowed by the implicit "Self-Zone" allow rule.
• D.It is denied by the default "Deny All" rule unless explicitly allowed.

A network engineer is able to ping and traceroute from SD-WAN branch IP 192.168.1.123 to servers in primary data center - DC1, but is unable to ping or traceroute to a server 10.2.2.22 in the newly configured secondary data center, DC2.
The DC2 ION device is advertising the branch IP subnet 192.168.1.0/24 to the DC2 core via eBGP Core Peer.
The DC2 data center site has site prefix 10.2.2.0/23 configured.
Which configuration will resolve the issue in this scenario?

• A.Remove site prefix 10.2.2.0/23 from DC2 site configuration.
• B.The default 0.0.0.0/0 static route to the DC2 ION pointing to the DC2 next hop.
• C.Reconfigure eBGP Core Peer to iBGP Core Peer.
• D.Reconfigure eBGP Core Peer as Edge Peer type.

Which troubleshooting action should be taken when resources at one branch site can reach the internet but cannot be reached from the data center (DC)?

• A.Create static route with DC ION as a next hop.
• B.Set the site in a control mode.
• C.Admin up the Prisma SD-WAN DC endpoints.
• D.Ensure the LAN branch prefixes are set to "global."

BGP core peers on data center IONs are learning only a default route from the core router. Which action will protect the SD-WAN network from getting isolated in the event of BGP misconfiguration on the core routers?

• A.Implement BGP route filtering using prefix lists and route maps on the ION devices to only accept specific, known prefixes from the core.1
• B.Enable BGP Bidirectional Forwarding Detection (BFD) on the core peer sessions to rapidly detect BGP neighbor failures.
• C.Configure BGP max-prefix limits on the ION devices to prevent them from accepting too many routes from the core routers.
• D.Add a static default route with higher admin distance pointing to the core peer IPs.