A network design mandates segmentation at the routing level and traffic isolation across various services, such as teller cash registers, ATM traffic, guest Wi-Fi, and corporate applications.Which command can be used to validate and display the Virtual Routing and Forwarding (VRF) route leak rules?
Answer(s): D
The command inspect vrf route_leak_rule all in Prisma SD-WAN is used to validate and display VRF route leak rules. This allows administrators to verify which routes are being shared between VRFs, ensuring proper segmentation and traffic isolation across different services such as teller systems, ATMs, guest Wi-Fi, and corporate applications.
In which modes can a Prisma SD-WAN branch be deployed?
A Prisma SD-WAN branch can operate in POV (Proof of Value), Production, or Analytics modes.-POV mode is used for evaluation and testing.-Production mode enables full SD-WAN functionality for live traffic.-Analytics mode allows traffic observation without influencing forwarding decisions, useful for assessment or gradual deployment.-
A network engineer is monitoring a high availability (HA) pair of ION 7000 devices at a regional hub. During a maintenance window, the active device's control link interface is accidentally disabled, interrupting the heartbeat communication between the peers.Which action does the standby ION device perform?
Answer(s): B
In an ION high availability pair, loss of the HA control-link heartbeat causes the standby device to take over the active role when failover conditions are met. It then uses gratuitous ARP to update neighboring devices so traffic is redirected to the newly active ION interfaces.
A new Prisma SD-WAN site is deployed with one internet (ISP-1) and one MPLS circuit (Carrier-B). The public VPNs to the data center ION are up, but the private VPNs over MPLS transport are down.Which mismatch is the root cause of the issue?
Private VPN formation over MPLS depends on matching WAN network definitions between the branch and data center sites. If the MPLS circuits are associated with different WAN networks, Prisma SD-WAN cannot establish the private overlay tunnels across that transport, even though public VPNs over the internet remain operational.
Which IONs can support Branch Gateway?
Prisma SD-WAN Branch Gateway functionality is supported on higher-capacity ION models that can handle aggregation and gateway services for multiple branch connections. Models such as 9200, 3200, 5200, and 7116V are capable of acting as Branch Gateways, providing routing, security, and SD-WAN overlay termination for branch sites.
Post your Comments and Discuss Palo Alto Networks SD-WAN-Engineer exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the SD-WAN-Engineer content, but please register or login to continue.