2.2 Explain the Function of Prisma SD-WAN (e.g., WAN Optimization, Path and NAT Policies, Zone-Based Firewalls, Monitoring and Logging) NETWORK-SECURITY-PROFESSIONAL Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is the primary function of a NAT policy in Prisma SD-WAN?

   • ATo segment traffic between different security zones
   • BTo translate source or destination addresses and ports to enable communication across different networks
   • CTo select the best WAN link for traffic based on application performance
   • DTo monitor and log traffic for troubleshooting
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A retail chain with 200 stores connects each store to a regional hub over two MPLS links and one broadband link. The company wants VoIP traffic to always use the lowest-latency path, while bulk backup traffic should use the least expensive link even if it has higher latency. Which Prisma SD-WAN feature should the administrator configure to meet these requirements?

   • ACreate a path policy that matches VoIP traffic and sets a strict SLA for latency, and another path policy for backup traffic that prioritizes cost over SLA.
   • BSet up a zone-based firewall rule to prioritize VoIP traffic over backup traffic within the same zone.
   • CEnable link aggregation on all WAN interfaces to combine the bandwidth of the MPLS and broadband links for both VoIP and backup traffic.
   • DConfigure a NAT policy to translate the source addresses of backup traffic so it is routed over the broadband link.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A hospital network uses Prisma SD-WAN to connect its main campus, a remote clinic, and a data center. The security team wants to ensure that patient records (in the data center) can only be accessed by the main campus, not the remote clinic, while still allowing the remote clinic to access the internet. Which Prisma SD-WAN feature should be used to enforce this segmentation?

   • AConfigure a path policy that routes data center traffic only over the link that connects to the main campus.
   • BSet up a NAT policy on the remote clinic's firewall to block access to the data center's IP range.
   • CEnable link aggregation on the data center's WAN links to increase bandwidth and prevent unauthorized access.
   • DCreate a zone-based firewall policy that places the main campus and data center in one zone, the remote clinic in another zone, and defines rules to allow only the main campus to reach the data center.
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A company uses Prisma SD-WAN to connect two sites that both use the 10.0.0.0/8 private IP range. The sites need to communicate with each other, but the overlapping IP ranges prevent direct routing. The administrator must enable communication without changing the IP addresses on any devices. Which approach should be used?

   • ACreate a path policy that forces inter-site traffic over a specific WAN link to avoid the IP conflict.
   • BEnable link aggregation on the WAN interfaces at both sites to combine the links and eliminate the conflict.
   • CPlace both sites in the same zone and create a zone-based firewall rule that permits all traffic between them.
   • DConfigure NAT policies on both sites to translate the source and destination addresses of inter-site traffic to non-overlapping subnets.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Why is log collection important in Prisma SD-WAN?

   • AIt automatically adjusts path policies based on traffic patterns.
   • BIt helps in troubleshooting and compliance by providing a record of network events and traffic.
   • CIt translates private IP addresses to public addresses.
   • DIt aggregates WAN links to increase bandwidth.
   Reveal Solution Discussion Select an answer first