Free Palo Alto Networks SD-WAN-Engineer Practice Exam Questions and Answers 2026

Start Learning with the Newest and 100% Free SD-WAN-Engineer Exam Dumps Questions

Page: 1 / 18

Total 87 Questions | Updated On: Apr 03, 2026

Add To Cart

Question 1

An administrator needs to generate a monthly report showing the "Top Applications" by bandwidth usageacross all branch sites to justify a bandwidth upgrade.Which specific component of the Prisma SD-WAN interface is designed to create, schedule, and email thesePDF summaries?

A : Activity Charts

B : Media Analytics

C : Reports

D : Flow Browser

Answer: C

Question 2

By default, how many days will Prisma SD-WAN VPNs stay operational before the keys expire when an IONdevice loses connection with the controller?

A : 1

B : 3

C : 5

D : 7

Answer: B

Question 3

Based on the HA topology image below, which two statements describe the end-state when power is removedfrom the ION 1200-S labeled “Active”, assuming that the ION labeled “Standby” becomes the active ION?(Choose two.)

A : Both the connection to ISP A and the connection to LTE/5G will be usable.

B : The VRRP Virtual IP address assigned to any SVIs will be moved to the newly active ION.

C : The newly active ION will send a gratuitous ARP to the LAN for the IP address of any SVIs.

D : The connection to ISP A will be usable, but the connection to LTE/5G will not.

Answer: A,C

Question 4

Full discovery and classification of IoT devices by the IoT Security service is failing. Which Prisma SDWAN ION device configuration will cause this behavior?

A : The ION devices are missing DHCP Configuration. If ION devices are not explicitly configured aseither a DHCP relay agent or a DHCP server, DHCP traffic logs will not be sent to the Strata LoggingService, resulting in incomplete device profiles for IoT Security.

B : The Prisma SD-WAN ION devices lack properly configured or enabled Service Health Probesspecifically targeting the IoT device subnets. Without these active probes, the system cannot gathercritical real-time reachability and performance metrics essential for dynamic device profiling andclassification.

C : The Syslog export configuration on the ION devices to the Strata Logging Service has filters that aretoo restrictive, potentially excluding logs vital for IoT Security’s device identification and classificationengine. This prevents comprehensive event data, including device discovery messages, from reachingthe portal.

D : The ION devices are not configured to explicitly enable and export IPFIX flow records, especially thosecontaining Layer 2 and Layer 7 context, to the Strata Logging Service for IoT Security. While ARPdata is sent by default, comprehensive device classification relies on these detailed flow records, whichare not being captured.

Answer: A

Question 5

An administrator needs to ensure that critical VoIP traffic is not dropped even when the branch's primaryinternet link is fully saturated with bulk file transfers.Which QoS mechanism does Prisma SD-WAN automatically apply to the "Platinum" priority class to preventstarvation by lower-priority classes?

A : Strict Priority Queuing (SPQ)

B : Weighted Round Robin (WRR)

C : Hierarchical Token Bucket (HTB) with guaranteed bandwidth

D : First-In, First-Out (FIFO)

Answer: C

Page: 1 / 18

Total 87 Questions | Updated On: Apr 03, 2026

Add To Cart