Free Cram & Latest Exams Dumps

NEW QUESTION 31
Two branch sites, “Branch-A” and “Branch-B”, are both behind active NAT devices (Source NAT) on their local internet circuits.
What requirement must be met for these two branches to successfully establish a direct Dynamic VPN (ION-to-ION) tunnel over the internet?

NEW QUESTION 32
When defining a Path Quality Profile (SLA) for a “Transactional” application group (e.g., Citrix, Oracle), the administrator sets the “Packet Loss” threshold to 1%.
What happens to the traffic for this application if all active paths currently exceed this 1% loss threshold?

NEW QUESTION 33
By default, how many days will Prisma SD-WAN VPNs stay operational before the keys expire when an ION device loses connection with the controller?

NEW QUESTION 34
Based on the HA topology image below, which two statements describe the end-state when power is removed from the ION 1200-S labeled “Active”, assuming that the ION labeled “Standby” becomes the active ION? (Choose two.)

NEW QUESTION 35
During the Zero Touch Provisioning (ZTP) process of a new ION device at a branch site, which interface ports are supported by default to request an IP address via DHCP and reach the Prisma SD-WAN controller for claiming?

NEW QUESTION 36
An administrator needs to ensure that critical VoIP traffic is not dropped even when the branch’s primary internet link is fully saturated with bulk file transfers.
Which QoS mechanism does Prisma SD-WAN automatically apply to the “Platinum” priority class to prevent starvation by lower-priority classes?

NEW QUESTION 37
User-ID integration is configured for a Prisma SD-WAN deployment. Branch-1 has the user-to-IP mappings available, and User-1 is mapped to IP-1.
To which two use cases can User-ID based zone-based firewall policies be applied? (Choose two.)

NEW QUESTION 38
Return traffic for an application from the branch is being dropped on the branch ION. Application traffic arrives via SD-WAN internet overlay at the branch, and path policy for the application at the branch has the following settings:
Active = MPLS Overlay
Backup = Prisma Access on internet
Which branch configuration is the probable cause of this behavior?

NEW QUESTION 39
A network engineer is troubleshooting a “Voice Quality” issue. They suspect that the DSCP markings are being stripped or altered by the ISP.
Which tool in the Prisma SD-WAN portal allows the engineer to capture live packets on the WAN interface and inspect the IP header ToS/DSCP field?

NEW QUESTION 40
In which modes can a Prisma SD-WAN branch be deployed?

NEW QUESTION 41
For how many hours are Prisma SD-WAN VPN shared secrets valid?

NEW QUESTION 42
For how many hours are Prisma SD-WAN VPN shared secrets valid?

NEW QUESTION 43
Site templates are to be used for the large-scale deployment of 100 Prisma SD-WAN branch sites across different regions.
Which two statements align with the capabilities and best practices for Prisma SD-WAN site templates?
(Choose two.)

NEW QUESTION 44
How can a network administrator detect a site outage or a service-level agreement (SLA) violation using controller-generated incidents?

NEW QUESTION 45
An administrator is configuring an ION 2000 device for a deployment where high availability is required, but the site has only a single internet circuit. The administrator configures a Bypass Pair (Fail-to-Wire) on ports 1 and 2 connecting the ISP modem to the legacy firewall.
If the ION device loses power, what is the resulting behavior of the traffic flowing through this Bypass Pair?

NEW QUESTION 46
Which specialized hardware feature is available on the ION 9000 series but NOT on the ION 3000 series, making it suitable for high-throughput Data Center deployments?

NEW QUESTION 47
In a data center (DC) with two ION devices, all of the remote branch Prisma SD-WAN VPNs are active only on DC ION-1.
Why are no VPNs active on DC ION-2?

NEW QUESTION 48
An administrator has configured a Zone-Based Firewall (ZBFW) policy on a branch ION. They created a rule to “Allow” traffic from the “Guest” zone to the “Internet” zone. However, users in the “Guest” zone are reporting they cannot reach a specific public website, and the Flow Browser shows the flow state as “REJECT”.
What is the most likely reason for this specific rejection, assuming the “Allow” rule is correctly placed at the top of the list?

NEW QUESTION 49
The UI triggers incident DEVICESW_CONCURRENT_FLOWLIMIT_EXCEEDED for a branch site. Based in the image below, which tool can be used to identify the host?

NEW QUESTION 50
Two branch sites, “Branch-A” and “Branch-B”, are both behind active NAT devices (Source NAT) on their local internet circuits.
What requirement must be met for these two branches to successfully establish a direct Dynamic VPN (ION- to-ION) tunnel over the internet?

NEW QUESTION 51
When an ION device has been claimed, the cloud-based controller generates and communicates with the device by which method?

NEW QUESTION 52
An ION 3000 device at a remote branch has suffered a critical hardware failure and must be replaced via the RMA process. The administrator has received the replacement unit.
What is the correct procedure to transfer the configuration and license from the defective unit to the replacement unit to ensure minimal downtime and retention of historical data?

NEW QUESTION 53
Full discovery and classification of IoT devices by the IoT Security service is failing. Which Prisma SD- WAN ION device configuration will cause this behavior?

NEW QUESTION 54
A network engineer is troubleshooting a “Voice Quality” issue. They suspect that the DSCP markings are being stripped or altered by the ISP.
Which tool in the Prisma SD-WAN portal allows the engineer to capture live packets on the WAN interface and inspect the IP header ToS/DSCP field?

NEW QUESTION 55
Which action meets the needs of an organization that requires elevated incident notifications for its headquarters location?