3.1 Demonstrate Understanding of Device-Level Statistics Monitoring SD-WAN-ENGINEER Practice Questions (Page 6)

Questions 26–29

1. 26application · medium

   An engineer needs to verify that the IPsec tunnels on a firewall are passing traffic and to check the current throughput on each tunnel. Which CLI command should the engineer use?

   • Ashow session all
   • Bshow system resources
   • Cshow interface all
   • Dshow vpn ipsec tunnel
   Reveal Solution Discussion Select an answer first
2. 27expert · hard

   A firewall at a regional hub is experiencing session drops and slow throughput. The engineer checks the system resources and sees: dataplane CPU at 95%, management plane CPU at 30%, memory at 80%, and session table at 75%. The engineer also notices that the firewall is logging a high volume of traffic to the management plane. Which action is most likely to resolve the issue?

   • AReboot the firewall to clear the session table and reset the dataplane.
   • BIncrease the session table size to accommodate more sessions.
   • CUpgrade the firewall's memory to improve packet processing.
   • DReduce the logging rate by adjusting the log forwarding profile or disabling verbose logging for high-volume traffic.
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A network administrator notices that the SD-WAN tunnel between two sites is showing high jitter during business hours. The administrator needs to determine whether the jitter is caused by the underlying link or by the SD-WAN device's processing. Which approach should the administrator take?

   • AIncrease the jitter buffer on the remote device.
   • BReboot the SD-WAN device to clear any temporary processing issues.
   • CCheck the dataplane CPU utilization to see if the device is overloaded.
   • DCheck the tunnel statistics in the Monitor tab and compare them with the interface statistics for the WAN link.
   Reveal Solution Discussion Select an answer first
5. 29expert · hard

   A site is experiencing poor performance for a business-critical application. The SD-WAN tunnel statistics show: tunnel 1 (MPLS) has 2% packet loss and 40 ms latency; tunnel 2 (broadband) has 0.1% packet loss and 90 ms latency. The interface statistics for the MPLS link show 0 errors and 0 discards, but the link is at 95% utilization. Which action should the engineer take?

   • AInvestigate the MPLS interface for physical-layer issues.
   • BConfigure the SD-WAN policy to prefer tunnel 2 (broadband) for the critical application.
   • CIncrease the bandwidth on the MPLS link.
   • DDisable tunnel 1 (MPLS) to force all traffic over tunnel 2.
   Reveal Solution Discussion Select an answer first