5.4 Explain Policy Issue Troubleshooting SD-WAN-ENGINEER Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   A security policy rule is intended to allow traffic from the internal network to a specific server, but traffic is being denied. The rule is placed after a broad deny rule that matches all traffic. What is the most likely cause of the issue?

   • AThe allow rule has the wrong application set.
   • BThe allow rule has the wrong action set to 'drop'.
   • CThe allow rule has a typo in the destination address.
   • DThe allow rule is placed after a broad deny rule, so the deny rule matches first and blocks the traffic.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   A network administrator notices that traffic is being denied by a security policy, but the SD-WAN forwarding policy has a rule that should route this traffic over a specific link. What is the most likely outcome?

   • AThe traffic is forwarded over the specified link because the SD-WAN policy overrides the security policy.
   • BThe traffic is dropped because the security policy denies it, and the SD-WAN policy is not applied.
   • CThe traffic is forwarded over the specified link, but a log entry is generated indicating a policy conflict.
   • DThe traffic is forwarded over the specified link, but only if the SD-WAN policy has a higher priority than the security policy.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   When troubleshooting a policy issue, which log type would provide the most detailed information about the action taken on a specific session?

   • AConfiguration logs
   • BAlarm logs
   • CSystem logs
   • DTraffic logs
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which troubleshooting tool in Palo Alto Networks allows an administrator to test a packet against the security policy rulebase without actually sending traffic?

   • ATraceroute
   • BPolicy simulator
   • CPacket capture
   • DDebug log
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   When troubleshooting a policy issue, which tool would provide the most detailed information about the internal processing of a session, including the rules evaluated and the action taken?

   • APacket capture
   • BDebug logs
   • CPolicy hit counts
   • DTraffic logs
   Reveal Solution Discussion Select an answer first