A branch office uses a VoIP application that is configured with a Path Policy specifying a primary Direct Internet Access (DIA) circuit and a backup VPN path through a regional hub. The administrator enables Autonomous Digital Experience Manager (ADEM) to monitor the user experience for this application.How will the ION device execute the ADEM synthetic probes?
Answer(s): B
ADEM performs synthetic monitoring across both active and backup paths defined in the Prisma SD-WAN Path Policy, allowing the ION device to evaluate application performance and detect degradation on either path before failover occurs.
https://docs.paloaltonetworks.com/autonomous-dem/administration/types-of-application-experience-monitoring https://docs.paloaltonetworks.com/autonomous-dem/administration/get-started-with-adem/adem-monitoring-an d-tests/set-up-an-adem-application-test-remote-sites
When using the SASE onboarding feature to connect Prisma SD-WAN branch sites to Prisma Access, which statement accurately applies to the deployment mode "Internet-Only-with-Mobile-Users''?
Answer(s): D
The Internet-Only-With-Mobile-User-Access deployment mode provides internet and mobile-user connectivity while restricting route propagation out of Prisma Access by applying the BGP no-export community. This keeps the routing scope aligned with an internet-focused deployment while still allowing mobile-user access.
https://docs.paloaltonetworks.com/prisma-sd-wan/administration/prisma-sd-wan-native-integrations /configure-sase-connectivity
In a data center (DC) with two ION devices, all of the remote branch Prisma SD-WAN VPNs are active only on DC ION-1.Why are no VPNs active on DC ION-2?
If all branch VPNs terminate only on DC ION-1, it is likely because DC ION-2 and the branches are in different SD-WAN domains. VPNs are established only between devices in the same domain, so DC ION-2 does not participate in the VPN overlay for those branches, even if physically present in the data center.
What does Prisma SD-WAN use for monitoring and operations to deliver flow data and application visibility?
Prisma SD-WAN uses IPFIX (IP Flow Information Export) for monitoring and operational purposes, providing detailed flow data and application visibility. IPFIX enables tracking of traffic patterns, application usage, and performance metrics across the SD-WAN fabric.
What are two requirements for implementing user/group-based path policies? (Choose two.)
Answer(s): A,B
User/group-based path policies in Prisma SD-WAN require:-Cloud Identity Engine (CIE): to provide user and group identity context for policy enforcement.-Internal host detection: to map user identities to IP addresses within the network, enabling accurate identification of traffic sources for applying user/group-based path policies.-
Post your Comments and Discuss Palo Alto Networks SD-WAN-Engineer exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the SD-WAN-Engineer content, but please register or login to continue.