Free Palo Alto Networks SD-WAN-Engineer Exam Dumps Questions & Answers

In a Data Center deployment, what is the key functional difference between configuring a BGP neighbor as a
"Core Peer" versus an "Edge Peer"?

• A.  A Core Peer is used for connecting to the internet, while an Edge Peer connects to the MPLS provider.
• B.  A Core Peer supports eBGP only, while an Edge Peer supports iBGP only.
• C.  A Core Peer automatically redistributes learned routes into the SD-WAN fabric, whereas an Edge Peer does not.
• D.  A Core Peer is used for LAN-side routing to learn DC prefixes, while an Edge Peer is used for WAN- side routing to the Service Provider.

Which configuration requirement must be met to allow two branch ION devices to automatically establish a direct Dynamic VPN (branch-to-branch) connection for traffic flow, bypassing the Data Center?

• A.  The Data Center ION must be offline to trigger the dynamic failover.
• B.  A static "Gre Tunnel" must be manually configured between the two sites.
• C.  Both ION devices must be members of the same VPN Cluster.
• D.  The "Standard VPN" path policy must be selected.

What are two requirements for implementing user/group-based path policies? (Choose two.)

• A.  Autonomous Digital Experience Manager (ADEM)
• B.  Cloud Identity Engine
• C.  Data center ION
• D.  Internal host detection

A network administrator notices that a branch ION device is experiencing high CPU utilization due to a suspected TCP SYN Flood attack originating from a compromised host on the local LAN.
Which specific security feature should be configured and applied to the "LAN" zone to mitigate this Denial of Service (DoS) attack?

• A.  Zone Protection Profile
• B.  Application Quality Profile (AQP)
• C.  Zone-Based Firewall (ZBFW) Rule with a "Deny" action
• D.  Access Control List (ACL) on the WAN interface

An administrator is configuring an ION 2000 device for a deployment where high availability is required, but the site has only a single internet circuit. The administrator configures a Bypass Pair (Fail-to-Wire) on ports 1 and 2 connecting the ISP modem to the legacy firewall.
If the ION device loses power, what is the resulting behavior of the traffic flowing through this Bypass Pair?

• A.  Traffic is blocked to prevent uninspected packets from entering the network (Fail-to-Block).
• B.  The internal relay closes, physically bridging Port 1 and Port 2, allowing traffic to flow transparently between the modem and firewall.
• C.  The device reboots into "Safe Mode" and acts as a Layer 2 switch.
• D.  Traffic is rerouted to the LTE modem automatically.