3.6 Demonstrate Understanding of Monitoring and Managing SASE-related Events SD-WAN-ENGINEER Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which metric is commonly used to monitor the performance of an SD-WAN link in a SASE environment?

   • ANumber of security rules
   • BFirewall software version
   • CNumber of users in the directory
   • DLatency
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which action is part of managing the lifecycle of SASE events?

   • ADisabling logging to avoid generating events
   • BArchiving old logs to external storage for long-term compliance
   • CDeleting all logs immediately after they are generated to save space
   • DIgnoring retention policies and keeping logs indefinitely
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   An administrator notices that the SD-WAN appliance at a remote site is frequently rebooting. Which metric should the administrator check first to diagnose the issue?

   • ACPU and memory utilization on the appliance
   • BFirewall traffic throughput
   • CCloud security service risk scores
   • DNumber of active VPN tunnels
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   An administrator wants to proactively identify potential performance degradation in the SASE environment before users are impacted. Which monitoring approach would be most effective?

   • AWait for users to report issues before investigating
   • BReview firewall traffic logs daily for anomalies
   • CUse the built-in dashboard to view current status only when needed
   • DSet up alerts based on threshold values for key performance metrics (e.g., CPU, memory, link utilization)
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A company's compliance policy requires that SASE event logs be retained for at least one year, but the current log storage fills up quickly. The administrator wants to ensure that logs are available for the full retention period without exceeding storage capacity. Which approach should they take?

   • AReduce the log level to only record critical events
   • BIncrease the log storage capacity by adding more disk space to the firewall
   • CConfigure log forwarding to an external SIEM or storage repository that supports long-term retention
   • DSet up automatic deletion of logs older than 30 days
   Reveal Solution Discussion Select an answer first