3.6 Demonstrate Understanding of Monitoring and Managing SASE-related Events SD-WAN-ENGINEER Practice Questions (Page 5)

Questions 21–24

1. 21foundation · easy

   Which diagnostic command is commonly used on a Palo Alto Networks firewall to check the status of SD-WAN tunnels?

   • Ashow sdwan tunnel
   • Bshow interface all
   • Cshow system resources
   • Dshow routing route
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   An organization wants to be notified immediately when a critical SASE component, such as a remote site's SD-WAN link, goes down. The network team also wants to avoid being paged for minor fluctuations. Which configuration should they implement?

   • AConfigure an email alert for any log entry with severity 'critical' from the SD-WAN appliance
   • BSet up an SNMP trap for every interface status change on the SD-WAN appliances
   • CUse the built-in dashboard to visually monitor link status and rely on manual checks
   • DCreate a custom alert rule that triggers only when the SD-WAN link status remains 'down' for more than 60 seconds
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A company is required to archive SASE event logs for five years for regulatory compliance. The local storage on the firewalls can only hold 30 days of logs. Which solution should the administrator implement to meet the requirement?

   • AIncrease the log storage on each firewall to hold five years of logs
   • BExport logs manually to a local file server every month
   • CReduce the log level to only store critical events to save space
   • DForward logs to an external archival system, such as an SIEM or cloud storage, with a retention policy of five years
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   What is the primary purpose of correlating events from different SASE components, such as firewalls and SD-WAN?

   • ATo automatically remediate all security threats
   • BTo identify security incidents and performance issues that span multiple components
   • CTo replace the need for individual component monitoring
   • DTo reduce the number of logs generated by each component
   Reveal Solution Discussion Select an answer first