4.5 Demonstrate Understanding of Path and Security Policy Implementation Based on User / Group ID SD-WAN-ENGINEER Practice Questions (Page 1)

Questions 1–5

1. 1foundation · medium

   When configuring a path selection policy in Palo Alto Networks SD-WAN, how can user or group identity be incorporated?

   • ABy using QoS policies to prioritize traffic based on user identity
   • BBy assigning a static route per user in the routing table
   • CBy configuring a separate virtual router for each user group
   • DBy specifying a user or group as a match criterion in the path policy rule
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A company has two SD-WAN links: a high-cost, low-latency MPLS link and a low-cost, high-latency broadband link. The 'Trading' group needs low latency for their trading application, while the 'Research' group can tolerate higher latency. How can the administrator ensure that the 'Trading' group's traffic uses MPLS and the 'Research' group's traffic uses broadband?

   • ACreate a QoS policy that prioritizes the 'Trading' group's traffic, which will force it over MPLS.
   • BCreate two path policies: one for the 'Trading' group to prefer MPLS and one for the 'Research' group to prefer broadband.
   • CCreate a security policy that allows the 'Trading' group to use MPLS and the 'Research' group to use broadband.
   • DCreate a single path policy for the 'Trading' group to prefer MPLS, and the 'Research' group will automatically use broadband.
   Reveal Solution Discussion Select an answer first
4. 3foundation · medium

   What is the benefit of using User/Group ID in path policy rules?

   • AIt ensures the user always gets the highest bandwidth
   • BIt eliminates the need for any routing protocols
   • CIt automatically encrypts all traffic from that user
   • DIt allows path selection to be based on the identity of the user or group, not just the source IP
   Reveal Solution Discussion Select an answer first
5. 4foundation · medium

   How is User/Group ID integrated into the SD-WAN architecture to support consistent policy enforcement?

   • AIt is configured separately on each device without any central coordination
   • BIt is stored only on the SD-WAN controller and not used by the data plane
   • CIt is shared across SD-WAN devices so that security and path policies can use the same identity information
   • DIt is used only for path policies, not security policies
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   An SD-WAN administrator needs to ensure that the 'Research' group's traffic to a specific cloud application uses the broadband link, but the 'Research' group's traffic to all other destinations uses MPLS. The administrator creates a path policy for the 'Research' group to prefer MPLS. What additional configuration is needed to ensure the cloud application traffic uses broadband?

   • ACreate a security policy that allows the 'Research' group to use broadband for the cloud application.
   • BCreate a more specific path policy for the 'Research' group and the cloud application's destination, setting the preferred path to broadband.
   • CCreate a QoS policy that prioritizes the cloud application traffic, which will force it over broadband.
   • DModify the existing path policy to include the cloud application's destination and set the preferred path to broadband.
   Reveal Solution Discussion Select an answer first