Free Palo Alto Networks SD-WAN-Engineer Exam Dumps Questions & Answers

Which configuration requirement must be met to allow two branch ION devices to automatically establish a direct Dynamic VPN (branch-to-branch) connection for traffic flow, bypassing the Data Center?

• A.  A static "Gre Tunnel" must be manually configured between the two sites.
• B.  The Data Center ION must be offline to trigger the dynamic failover.
• C.  The "Standard VPN" path policy must be selected.
• D.  Both ION devices must be members of the same VPN Cluster.

What are two requirements for implementing user/group-based path policies? (Choose two.)

• A.  Data center ION
• B.  Cloud Identity Engine
• C.  Internal host detection
• D.  Autonomous Digital Experience Manager (ADEM)

A site has two internet circuits: Circuit A with 500 Mbps capacity and Circuit B with 100 Mbps capacity.
Which path policy configuration will ensure traffic is automatically shifted from a saturated circuit to the circuit with available bandwidth?

• A.  Both circuits under active path
• B.  Circuit A as an active, Circuit B as a backup
• C.  Circuit B as an active, Circuit A as a backup
• D.  Circuit B as an L3 failure path

An administrator wants to configure a Path Policy that routes all "Guest Wi-Fi" traffic directly to the internet using the local broadband interface, bypassing all VPN tunnels.
Which Service & DC Group setting should be selected in the policy rule to achieve this "Direct Internet Access" (DIA) behavior?

• A.  Default-Cluster
• B.  Any-Private
• C.  Standard VPN
• D.  Direct

User-ID integration is configured for a Prisma SD-WAN deployment. Branch-1 has the user-to-IP mappings available, and User-1 is mapped to IP-1.
To which two use cases can User-ID based zone-based firewall policies be applied? (Choose two.)

• A.  User-1 accessing a private application in data center via SD-WAN overlay, and destination User-ID based zone-based firewall rules on DC ION
• B.  User-1 accessing a private application in Branch-2 via SD-WAN overlay, and destination User-ID based zone-based firewall rules on Branch-2 ION
• C.  User-1 accessing a private application within Branch-1, and source User-ID based zone-based firewall rules on Branch-1 ION
• D.  User-1 accessing a SaaS application on direct internet and source User-ID based zone-based firewall rules on Branch-1 ION