SD-WAN-Engineer試験無料問題集（88題）「Palo Alto Networks SD-WAN Engineer 認定」

出題：1

An ION 3000 device at a remote branch has suffered a critical hardware failure and must be replaced via the RMA process. The administrator has received the replacement unit.
What is the correct procedure to transfer the configuration and license from the defective unit to the replacement unit to ensure minimal downtime and retention of historical data?

A. Use the "Replace Device" workflow in the Prisma SD-WAN portal, which automatically transfers the configuration (Device Shell) and re-associates the site to the new serial number.

B. Manually configure the new device from scratch, then open a support ticket to transfer the license.

C. Backup the configuration of the old device to a USB drive and restore it to the new device using the local console.

D. Delete the old device from the portal, create a new site for the replacement device, and rebuild the policies manually.

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

In which modes can a Prisma SD-WAN branch be deployed?

A. Disabled, Analytics, Control

B. POV, Production, Analytics

C. Testing, Control, POV

D. Production, Control, Disabled

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

When defining a Path Quality Profile (SLA) for a "Transactional" application group (e.g., Citrix, Oracle), the administrator sets the "Packet Loss" threshold to 1%.
What happens to the traffic for this application if all active paths currently exceed this 1% loss threshold?

A. The traffic is queued indefinitely until a path recovers.

B. The system automatically enables a Backup path, even if the Active paths are technically "Up" but degraded.

C. The system selects the best available path (lowest loss) among the active paths, even if it violates the profile.

D. The traffic is dropped to prevent data corruption.

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：4

Which IONs can support Branch Gateway?

A. 1200, 3200, 9200, 7108V1

B. 9200, 3200, 5200, 7116V

C. 3102V, 3200, 1200S, 5200

D. 3104V, 1200S, 5200, 7108V

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

A network design mandates segmentation at the routing level and traffic isolation across various services, such as teller cash registers, ATM traffic, guest Wi-Fi, and corporate applications. Which command can be used to validate and display the Virtual Routing and Forwarding (VRF) route leak rules?

A. dump vrf route_leak_rule

B. show interface vrf route_leak_rule all

C. inspect vrf route_leak_rule all

D. inspect flow_browser vrf all

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

Based on the HA topology image below, which two statements describe the end-state when power is removed from the ION 1200-S labeled "Active", assuming that the ION labeled "Standby" becomes the active ION?
(Choose two.)

A. The newly active ION will send a gratuitous ARP to the LAN for the IP address of any SVIs.

B. Both the connection to ISP A and the connection to LTE/5G will be usable.

C. The VRRP Virtual IP address assigned to any SVIs will be moved to the newly active ION.

D. The connection to ISP A will be usable, but the connection to LTE/5G will not.

正解：A,B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：7

Network segmentation is required due to overlapping IP address space and M&A scenarios. Which Prisma SD-WAN feature will achieve the desired segmentation and end-to-end connectivity in this use case?

A. Virtual Routing and Forwarding (VRF) profiles with proper site bindings to achieve desired isolation across the underlay

B. Multiple virtual routers with interface segmentation to achieve desired isolation across the secure fabric

C. Multiple contexts with interface segmentation to achieve desired isolation across the underlay

D. Virtual Routing and Forwarding (VRF) profiles with proper site bindings to achieve desired isolation locally and across the secure fabric

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：8

In a Data Center deployment, what is the key functional difference between configuring a BGP neighbor as a
"Core Peer" versus an "Edge Peer"?

A. A Core Peer automatically redistributes learned routes into the SD-WAN fabric, whereas an Edge Peer does not.

B. A Core Peer supports eBGP only, while an Edge Peer supports iBGP only.

C. A Core Peer is used for connecting to the internet, while an Edge Peer connects to the MPLS provider.

D. A Core Peer is used for LAN-side routing to learn DC prefixes, while an Edge Peer is used for WAN- side routing to the Service Provider.

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：9

An organization has provided the following technical requirements and details:
* High availability (HA) at all data center and branch locations
* Two geographically separate main data center locations
* One small data center location that contains local users and applications requiring policies
* 50 branch locations
* ISP capacities for all branch locations but no accurate measurement of the actual bandwidth consumption Based on Palo Alto Networks best practices and recommendations, which two licensing options will meet the customer objectives? (Choose two.)

A. Aggregate bandwidth subscription

B. Four data center subscriptions

C. Six data center subscriptions

D. Branch subscription per site

正解：A,C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

SD-WAN-Engineer試験無料問題集「Palo Alto Networks SD-WAN Engineer 認定」