SD-WAN Quiz - Page 5

Question 41: Why is it important to push configuration to Hubs before Branches in some SD-WAN scenarios?

a) Hubs have higher processing power. b) Branches cannot receive configuration directly from Panorama. c) Hubs need to be ready to accept tunnel initiations from branches. d) Branches control the overall configuration sync.

Question 42: What is a primary reason for using Aggregate Ethernet (AE) interfaces in SD-WAN?

a) To support Layer 2 traffic. b) To provide link redundancy and potentially increased bandwidth for WAN connections. c) To simplify IP addressing. d) To enable PPPoE authentication.

Question 43: If a branch firewall has two DIA links (Broadband and LTE) and an SD-WAN policy uses 'Top-Down Priority' listing Broadband first, what happens if the Broadband link exceeds PQP thresholds?

a) Traffic stops flowing. b) Traffic immediately fails over to the LTE link (if qualified). c) Traffic continues on the Broadband link but with degraded performance. d) The firewall waits for the Broadband link to recover.

Question 44: Which component is responsible for aggregating logs from multiple firewalls in larger SD-WAN deployments for centralized viewing in Panorama?

a) The SD-WAN plugin itself. b) Panorama's local disk. c) Dedicated Log Collectors. d) Strata Cloud Manager.

Question 45: When troubleshooting tunnel failures, besides `show sdwan connection`, what other `show vpn` commands are essential?

a) `show vpn license` b) `show vpn user-ids` c) `show vpn ike-sa` and `show vpn ipsec-sa` d) `show vpn memory`

Question 46: What does the 'Relaxed' Path Monitoring mode primarily achieve compared to 'Aggressive'?

a) Faster failover detection. b) Lower CPU usage on the firewall. c) Reduced probe frequency, saving bandwidth/cost on certain links. d) More accurate latency measurements.

Question 47: Can you change the Authentication Type of an Auto VPN cluster after devices have already been added?

a) Yes, easily via the dropdown. b) Yes, but it requires rebooting all devices. c) No, the cluster must be deleted and recreated with the new authentication type. d) No, authentication type is fixed based on the license.

Question 48: What is the main purpose of the 'Commit' operation in Panorama/SCM?

a) To push the configuration to firewalls. b) To validate the syntax of the candidate configuration. c) To save the candidate configuration as the new running configuration on the management platform. d) To install the SD-WAN plugin.

Question 49: Which feature uses parity bits to reconstruct lost packets over a VPN tunnel?

a) Packet Duplication (PD) b) Path Quality Profiles (PQP) c) Forward Error Correction (FEC) d) DIA AnyPath

Question 50: When planning BGP for Auto VPN, what address is typically configured and automatically used for peering?

a) The physical interface IP. b) A management profile IP. c) A static Loopback Address. d) The Panorama server IP.

Palo Alto Networks SD-WAN Quiz

Page 5 of 5 (Questions 41-50)