SD-WAN-Engineer 무료 덤프문제 온라인 액세스

A network design mandates segmentation at the routing level and traffic isolation across various services, such as teller cash registers, ATM traffic, guest Wi-Fi, and corporate applications. Which command can be used to validate and display the Virtual Routing and Forwarding (VRF) route leak rules?

• A.inspect vrf route_leak_rule all
• B.inspect flow_browser vrf all
• C.dump vrf route_leak_rule
• D.show interface vrf route_leak_rule all

A site has two internet circuits: Circuit A with 500 Mbps capacity and Circuit B with 100 Mbps capacity.
Which path policy configuration will ensure traffic is automatically shifted from a saturated circuit to the circuit with available bandwidth?

• A.Circuit B as an active, Circuit A as a backup
• B.Circuit A as an active, Circuit B as a backup
• C.Circuit B as an L3 failure path
• D.Both circuits under active path

An administrator wants to configure a Path Policy that routes all "Guest Wi-Fi" traffic directly to the internet using the local broadband interface, bypassing all VPN tunnels.
Which Service & DC Group setting should be selected in the policy rule to achieve this "Direct Internet Access" (DIA) behavior?

• A.Any-Private
• B.Direct
• C.Default-Cluster
• D.Standard VPN

An organization has provided the following technical requirements and details:
* High availability (HA) at all data center and branch locations
* Two geographically separate main data center locations
* One small data center location that contains local users and applications requiring policies
* 50 branch locations
* ISP capacities for all branch locations but no accurate measurement of the actual bandwidth consumption Based on Palo Alto Networks best practices and recommendations, which two licensing options will meet the customer objectives? (Choose two.)

• A.Aggregate bandwidth subscription
• B.Branch subscription per site
• C.Six data center subscriptions
• D.Four data center subscriptions

Two branch sites, "Branch-A" and "Branch-B", are both behind active NAT devices (Source NAT) on their local internet circuits.
What requirement must be met for these two branches to successfully establish a direct Dynamic VPN (ION- to-ION) tunnel over the internet?

• A.One of the sites must have a Static Public IP (1:1 NAT) to act as the initiator.
• B.The ION devices automatically use STUN (Session Traversal Utilities for NAT) to discover their public IPs and negotiate the connection.
• C.Dynamic VPNs are not supported if both sides are behind NAT.
• D.Both sites must disable NAT and use public IPs on the ION interface.