5.4 Explain Policy Issue Troubleshooting SD-WAN-ENGINEER Practice Questions (Page 3)

Questions 11–14

1. 11foundation · easy

   An administrator wants to determine if a specific security policy rule is being matched by traffic. Which tool provides the most direct evidence of rule matches?

   • APolicy hit counts
   • BRouting table
   • CSystem logs
   • DPacket capture
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   An administrator is verifying a security policy rule that is intended to allow HTTP traffic from the internal network to a web server. Which configuration element is NOT required for this rule to function correctly?

   • AAn application set to 'web-browsing' or a custom application that matches HTTP.
   • BA source address that matches the internal network subnet.
   • CA destination address that matches the web server's IP address.
   • DA service set to 'HTTP' or TCP port 80.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   Users at a branch office report that video conferencing traffic is experiencing high latency and packet loss. The security policy allows the traffic, and the forwarding policy has a rule for the video conferencing application. You check the hit counts and see that the forwarding policy rule is being hit. What is the most likely cause of the performance issue?

   • AThe forwarding policy is sending the traffic over a link that is congested.
   • BThe security policy is dropping some of the traffic due to a misconfigured application override.
   • CThe security policy is applying a QoS policy that is shaping the traffic incorrectly.
   • DThe forwarding policy rule is not matching the traffic, and it is being sent over the default path.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   An administrator discovers that two security policy rules overlap, and the first rule is a deny rule that is unintentionally blocking traffic that should be allowed by the second rule. What is the best way to resolve this misconfiguration?

   • AChange the deny rule's action to 'allow'.
   • BMove the allow rule above the deny rule so it is evaluated first.
   • CChange the allow rule's action to 'deny'.
   • DDelete the deny rule entirely.
   Reveal Solution Discussion Select an answer first