QuestionQ1
Deployment and ConfigurationComplete discovery and classification of IoT devices by the IoT Security service is failing.
Which Prisma SD-WAN ION device configuration would cause this behavior?
- A The ION devices are missing DHCP Configuration. If ION devices are not explicitly configured as either a DHCP relay agent or a DHCP server, DHCP traffic logs will not be sent to the Strata Logging Service, resulting in incomplete device profiles for IoT Security.
- B The Prisma SD-WAN ION devices lack properly configured or enabled Service Health Probes specifically targeting the IoT device subnets. Without these active probes, the system cannot gather critical real-time reachability and performance metrics essential for dynamic device profiling and classification.
- C The Syslog export configuration on the ION devices to the Strata Logging Service has filters that are too restrictive, potentially excluding logs vital for IoT Security’s device identification and classification engine. This prevents comprehensive event data, including device discovery messages, from reaching the portal.
- D The ION devices are not configured to explicitly enable and export IPFIX flow records, especially those containing Layer 2 and Layer 7 context, to the Strata Logging Service for IoT Security. While ARP data is sent by default, comprehensive device classification relies on these detailed flow records, which are not being captured.
QuestionQ2
Unified SASEWhich implementation enables Prisma SD-WAN to enhance application performance for organizations experiencing inconsistent user experiences across branch locations—particularly because of differing device types and network conditions—by using Layer 4 and Layer 7 optimization to increase throughput?
- A Packet duplication
- B WAN optimization
- C Forward Error Correction (FEC)
- D Application acceleration
Community Discussion
QuestionQ3
Deployment and ConfigurationIn which deployment modes can a Prisma SD-WAN branch be deployed?
- A Testing, Control, POV
- B Production, Control, Disabled
- C Disabled, Analytics, Control
- D POV, Production, Analytics
Community Discussion
QuestionQ4
Planning and DesignNetwork segmentation is needed because of overlapping IP address space and M&A scenarios.
Which Prisma SD-WAN feature provides the required segmentation and end-to-end connectivity for this use case?
- A Virtual Routing and Forwarding (VRF) profiles with proper site bindings to achieve desired isolation across the underlay
- B Virtual Routing and Forwarding (VRF) profiles with proper site bindings to achieve desired isolation locally and across the secure fabric
- C Multiple contexts with interface segmentation to achieve desired isolation across the underlay
- D Multiple virtual routers with interface segmentation to achieve desired isolation across the secure fabric
Community Discussion
QuestionQ5
Operations and MonitoringA network administrator at an organization that uses Prisma SD-WAN needs to identify the top applications specifically associated with the primary data center site.
Which WAN Clarity report approach is most effective for this use case?
- A Traffic Distribution: Top Applications report, when viewed in the context of the primary data center site, to list applications by their consumption directly related to that site’s traffic.
- B Application Performance report, globally aggregated across all sites, to see which applications have the highest overall bandwidth usage, then correlate these with known data center services
- C Hotspots: Undefined Domains report, specifically filtered for the data center site, to identify high-bandwidth FQDNs that might represent applications hosted in the data center
- D Utilization Quadrant report, focusing on the WAN circuits directly connected to the data center, to infer high application bandwidth from periods of high circuit use.
Community Discussion