SD-WAN-Engineer最も有効な質問と解答で勉強

Full discovery and classification of IoT devices by the IoT Security service is failing. Which Prisma SD- WAN ION device configuration will cause this behavior?

• A. The ION devices are not configured to explicitly enable and export IPFIX flow records, especially those containing Layer 2 and Layer 7 context, to the Strata Logging Service for IoT Security. While ARP data is sent by default, comprehensive device classification relies on these detailed flow records, which are not being captured.
• B. The ION devices are missing DHCP Configuration. If ION devices are not explicitly configured as either a DHCP relay agent or a DHCP server, DHCP traffic logs will not be sent to the Strata Logging Service, resulting in incomplete device profiles for IoT Security.
• C. The Prisma SD-WAN ION devices lack properly configured or enabled Service Health Probes specifically targeting the IoT device subnets. Without these active probes, the system cannot gather critical real-time reachability and performance metrics essential for dynamic device profiling and classification.
• D. The Syslog export configuration on the ION devices to the Strata Logging Service has filters that are too restrictive, potentially excluding logs vital for IoT Security's device identification and classification engine. This prevents comprehensive event data, including device discovery messages, from reaching the portal.

What are two requirements for implementing user/group-based path policies? (Choose two.)

• A. Data center ION
• B. Autonomous Digital Experience Manager (ADEM)
• C. Internal host detection
• D. Cloud Identity Engine

What does Prisma SD-WAN use for monitoring and operations to deliver flow data and application visibility?

• A. IP SLA
• B. IPFIX
• C. SNMPv3
• D. ADEM

In a Data Center deployment, what is the key functional difference between configuring a BGP neighbor as a
"Core Peer" versus an "Edge Peer"?

• A. A Core Peer supports eBGP only, while an Edge Peer supports iBGP only.
• B. A Core Peer automatically redistributes learned routes into the SD-WAN fabric, whereas an Edge Peer does not.
• C. A Core Peer is used for LAN-side routing to learn DC prefixes, while an Edge Peer is used for WAN- side routing to the Service Provider.
• D. A Core Peer is used for connecting to the internet, while an Edge Peer connects to the MPLS provider.

When configuring a Path Policy rule for a "Real-Time Video" application, the administrator wants to ensure the traffic uses the path with the lowest packet loss.
How does the Prisma SD-WAN ION determine the "Packet Loss" metric for a given path when there is no active user traffic flowing on that link?

• A. It queries the ISP's router via SNMP to retrieve interface error counters.
• B. It defaults to a static value of 0% loss until user traffic begins.
• C. It sends Active Probes (synthetic UDP packets) across the Secure Fabric to measure path quality continuously.
• D. It relies solely on Passive Monitoring of TCP retransmissions from other user traffic on that link.