Free SD-WAN-Engineer Exam Braindumps
Palo Alto Networks SD-WAN Engineer Questions 21–25 (page: 6)

Updated On: 3-Nov-2026

Where is route leaking configured between VRFs?

  1. VRF definition
  2. BGP peer
  3. Site configuration
  4. VRF profile

Answer(s): D

Explanation:

Route leaking between VRFs in Prisma SD-WAN is configured within the VRF profile. This allows controlled exchange of routes between isolated VRF instances while maintaining segmentation, ensuring specific inter-VRF communication without compromising overall routing isolation.



When configuring SASE connectivity with easy onboarding at a branch, which two options must be selected? (Choose two.)

  1. IPSec Crypto Profile
  2. Prisma Access Primary Location
  3. Prisma Access IKE Profile
  4. IPSec Termination Node

Answer(s): B,D

Explanation:

When using Easy Onboarding for SASE connectivity at a branch:
-You must select the Prisma Access Primary Location, which determines the nearest or preferred SASE node for the branch to connect to.
-You must select the IPSec Termination Node, which specifies where the branch’s IPSec tunnel will terminate in Prisma Access.
These selections ensure proper tunnel establishment and optimized routing to Prisma Access.



What is the number and structure of Prisma SD-WAN QoS queues supported per WAN interface?

  1. 12 queues
    4 classes
    3 application criteria within each class
  2. 16 queues
    4 classes
    4 application criteria with each class
  3. 8 queues
    1 priority queue
    7 non-priority queues
  4. 8 queues
    2 classes
    4 application criteria within each class

Answer(s): C

Explanation:

Prisma SD-WAN supports 8 QoS queues per WAN interface, consisting of 1 priority queue for latency-sensitive traffic (such as voice or video) and 7 non-priority queues for other traffic types. This structure ensures efficient bandwidth management and prioritization of critical applications.



An organization has provided the following technical requirements and details:
-High availability (HA) at all data center and branch locations
-Two geographically separate main data center locations
-One small data center location that contains local users and applications requiring policies
-50 branch locations
-ISP capacities for all branch locations but no accurate measurement of the actual bandwidth consumption Based on Palo Alto Networks best practices and recommendations, which two licensing options will meet the customer objectives? (Choose two.)
-

  1. Six data center subscriptions
  2. Aggregate bandwidth subscription
  3. Four data center subscriptions
  4. Branch subscription per site

Answer(s): A,D

Explanation:

Each data center site (two main DCs + small DC with local users) requires a subscription, and with HA, an additional subscription per HA pair is needed, totaling six data center subscriptions.
Each branch site requires a branch subscription, regardless of actual bandwidth, to enable SD-WAN features, monitoring, and policy enforcement. This approach aligns with Palo Alto Networks best practices for HA and site coverage.



A Prisma SD-WAN ION device is monitoring a real-time Zoom video session, and the primary ISP link begins experiencing jitter and latency that exceeds the configured Path Quality Profile.
What is the default behavior of the ION device to maintain session persistence?

  1. It will continue to use the degraded link but raise a critical alarm in the Prisma SD-WAN controller.
  2. It will encapsulate the traffic with Forward Error Correction (FEC) to reconstruct lost packets on the current link.
  3. It will move the flow to the next best available path that meets the application's service-level agreement (SLA) requirements.
  4. It will drop the flow to prevent further network congestion.

Answer(s): C

Explanation:

Prisma SD-WAN continuously evaluates path quality against the application's configured SLA criteria.
When the active path no longer meets those requirements, the ION device can dynamically steer the existing application flow to the next best path that satisfies the policy, helping preserve the real-time session and application experience.



Viewing page 6 of 17
Viewing questions 26 - 30 out of 86 questions


Post your Comments and Discuss Palo Alto Networks SD-WAN-Engineer exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!