Download Palo Alto Networks SD-WAN Engineer.SD-WAN-Engineer.ExamTopics.2025-12-21.14q.tqb

Vendor: Palo Alto Networks
Exam Code: SD-WAN-Engineer
Exam Name: Palo Alto Networks SD-WAN Engineer
Date: Dec 21, 2025
File Size: 152 KB
Download Exam

How to open TQB files?

Files with TQB (Taurus Question Bank) extension can be opened by Taurus Exam Studio.

Download
Taurus Exam Studio

Purchase
Coupon: TAURUSSIM_20OFF

Discount: 20%

Taurus Exam Simulator Taurus Exam Simulator Taurus Exam Simulator Taurus Exam Simulator Taurus Exam Simulator

Demo Questions

Question 1
Based on the HA topology image below, which two statements describe the end-state when power is removed from the ION 1200-S labeled “Active”, assuming that the ION labeled “Standby” becomes the active ION? (Choose two.)
  1. Both the connection to ISP A and the connection to LTE/5G will be usable.
  2. The VRRP Virtual IP address assigned to any SVIs will be moved to the newly active ION.
  3. The newly active ION will send a gratuitous ARP to the LAN for the IP address of any SVIs.
  4. The connection to ISP A will be usable, but the connection to LTE/5G will not.
Correct answer: BC
Question 2
A multinational company is deploying Prisma SD-WAN across North America, Europe, and Asia. The data centers in the North America region have served all regions, but regional policies are now being enforced that mandate each of the regions to build their own data centers and branch sites to only connect to their respective regional data centers.
How can this regionalization be achieved so that new or existing branch sites only build tunnels to the regional DC IONs?
  1. Create a new cluster for each regional DC ION and move the sites from the existing cluster to the new cluster.
  2. Disable to auto-tunnel feature globally on the Prisma SD-WAN portal and manually create all necessary tunnels exclusively between IONs within their designated regions.
  3. Remove the circuit labels and apply new circuit labels for in-region circuits only.
  4. Assign WAN interfaces to distinct Virtual Routing and Forwarding (VRF) instances for each region on the DC IONs, ensuring that branches only connect to the WAN interfaces/VRFs designated for their region.
Correct answer: C
Question 3
When identifying devices for IoT classification purposes, which two methods does Prisma SD-WAN use to discover devices that are not directly connected to the branch ION? (Choose two.)
  1. LLDP
  2. CDP
  3. SNMP
  4. Syslog
Correct answer: CD
Question 4
What are two requirements for implementing user/group-based path policies? (Choose two.)
  1. Cloud Identity Engine
  2. Internal host detection
  3. Autonomous Digital Experience Manager (ADEM)
  4. Data center ION
Correct answer: AB
Question 5
A site has two internet circuits: Circuit A with 500 Mbps capacity and Circuit B with 100 Mbps capacity.
Which path policy configuration will ensure traffic is automatically shifted from a saturated circuit to the circuit with available bandwidth?
  1. Circuit A as an active, Circuit B as a backup
  2. Circuit B as an active, Circuit A as a backup
  3. Both circuits under active path
  4. Circuit B as an L3 failure path
Correct answer: C
Question 6
Site templates are to be used for the large-scale deployment of 100 Prisma SD-WAN branch sites across different regions.
Which two statements align with the capabilities and best practices for Prisma SD-WAN site templates? (Choose two.)
  1. The use of Jinja conditional statements within a site template is not supported, thereby limiting dynamic customization options.
  2. Mandatory variables for any site template include the site name, ION software version, and at least one ION serial number /device name pair.
  3. Site templates offer the capability to pre-stage device configurations by creating a device shell.
  4. Once a site has been deployed using a template, its configuration can be updated or modified by applying an updated version of the template.
Correct answer: CD
Question 7
In which modes can a Prisma SD-WAN branch be deployed?
  1. Testing, Control, POV
  2. Production, Control, Disabled
  3. Disabled, Analytics, Control
  4. POV, Production, Analytics
Correct answer: D
Question 8
By default, how many days will Prisma SD-WAN VPNs stay operational before the keys expire when an ION device loses connection with the controller?
  1. 1
  2. 3
  3. 5
  4. 7
Correct answer: D
Question 9
What is the number and structure of Prisma SD-WAN QoS queues supported per WAN interface?
  1. 12 queues
    4 classes
    3 application criteria within each class
  2. 16 queues
    4 classes
    4 application criteria with each class
  3. 8 queues
    1 priority queue
    7 non-priority queues
  4. 8 queues
    2 classes
    4 application criteria within each class
Correct answer: C
Question 10
A network engineer isle to ping and traceroute from SD-WAN branch IP 192.168.1.123 to servers in primary data center – DC1, but is unable to ping or traceroute to a server 10.2.2.22 in the newly configured secondary data center, DC2.
The DC2 ION device is advertising the branch IP subnet 192.168.1.0/24 to the DC2 core via eBGP Core Peer. The DC2 data center site has site prefix 10.2.2.0/23 configured.
Which configuration will resolve the issue in this scenario?
  1. The default 0.0.0.0/0 static route to the DC2 ION pointing to the DC2 next hop.
  2. Reconfigure eBGP Core Peer to iBGP Core Peer.
  3. Reconfigure eBGP Core Peer as Edge Peer type.
  4. Remove site prefix 10.2.2.0/23 from DC2 site configuration.
Correct answer: C
CONNECT US
HOW TO OPEN VCE FILES

Use VCE Exam Simulator to open VCE files
Avanaset

HOW TO OPEN VCEX FILES

Use ProfExam Simulator to open VCEX files
ProfExam Screen

ProfExam
ProfExam at a 20% markdown

You have the opportunity to purchase ProfExam at a 20% reduced price

Get Now!