3.5 Explain the Implementation of Network Monitoring Tools for Real-Time Visibility SD-WAN-ENGINEER Practice Questions (Page 5)

Questions 21–23

1. 21foundation · easy

   What type of information is typically found in syslog messages?

   • AFull packet payloads for forensic analysis
   • BEvent descriptions, severity levels, and timestamps
   • CFlow records with source and destination IP addresses
   • DSNMP object identifiers (OIDs) and values
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which of the following is a category of network monitoring tool used for real-time visibility in SD-WAN?

   • ADNS resolver
   • BConfiguration management database (CMDB)
   • CFirewall rule analyzer
   • DFlow-based monitoring (e.g., NetFlow/sFlow)
   Reveal Solution Discussion Select an answer first
3. 23expert · hard

   A large enterprise has 500 SD-WAN sites and wants to monitor device health (CPU, memory, interface status) in real time. The monitoring team is concerned about the scalability of SNMP polling and wants to minimize the load on the WAN links. They also want to receive immediate notifications when a device goes down. Which approach best balances scalability and real-time notification?

   • AUse SNMP traps for critical events like device down and interface status changes, and use SNMP polling at a moderate interval (e.g., 5 minutes) for routine metrics.
   • BDisable SNMP polling and rely solely on syslog messages to detect device health and status changes.
   • CPoll all devices every 30 seconds to ensure real-time visibility, accepting the increased WAN load.
   • DUse NetFlow to monitor device health by analyzing flow records for anomalies.
   Reveal Solution Discussion Select an answer first