SD-WAN Quiz - Page 3

Question 21: Which Panorama tab provides the primary overview of SD-WAN health (App Performance, Link Performance)?

a) Dashboard b) Monitor > Logs c) Policies > SD-WAN d) SD-WAN > Monitoring

Question 22: If the SD-WAN Monitoring dashboard shows 'Impacted' applications, what is the likely next step?

a) Reboot the Panorama server. b) Increase the bandwidth on all links. c) Click the 'Impacted' count to drill down to affected sites/clusters. d) Check the global counters via CLI.

Question 23: When viewing link characteristics for an application, what does the dotted line on the latency/jitter/loss graphs typically represent?

a) The maximum possible value. b) The baseline established last month. c) The configured threshold from the Path Quality Profile. d) The 7-day moving average of the metric.

Question 24: What prerequisite is essential for SD-WAN monitoring data to appear in Panorama?

a) Using Auto VPN. b) Enabling BGP. c) Configuring log forwarding from firewalls to Panorama/Log Collectors. d) Having an active AIOps license.

Question 25: Which Panorama tool is most useful for diagnosing why a specific Commit & Push operation related to SD-WAN failed?

a) SD-WAN > Monitoring b) Monitor > Logs > System c) Panorama > Task Manager d) Panorama > Managed Devices > Health

Question 26: What type of information can be generated using the 'SD-WAN Reports' feature?

a) Real-time session tables. b) A list of all configured Link Tags. c) Summaries of top applications or links experiencing the most health degradation. d) A network topology map.

Question 27: A 'KeyID Mismatch' error in IKE logs typically points to an issue related to what?

a) Incorrect Pre-Shared Key. b) Mismatched device serial numbers used for tunnel identification. c) Expired certificates. d) Incorrect BGP AS numbers.

Question 28: What is the recommended first step to resolve a suspected PSK or KeyID mismatch after configuration changes?

a) Manually override the IKE key on one device. b) Reboot both peer firewalls. c) Perform a Commit and Push from Panorama to ALL devices in the affected cluster. d) Delete and recreate the VPN cluster.

Question 29: Which CLI command is best for viewing the real-time health status (latency, jitter, loss) of SD-WAN paths?

a) show vpn ike-sa b) show sdwan event c) show counter global filter delta yes | match sdwan d) show sdwan path-monitor stats vif

Question 30: If you change the Probe Frequency in an SD-WAN Interface Profile, what other profile likely needs adjustment?

a) SaaS Quality Profile b) Traffic Distribution Profile c) Path Quality Profile (Packet Loss threshold) d) BGP Redistribution Profile

Palo Alto Networks SD-WAN Quiz

Page 3 of 5 (Questions 21-30)