2.5 Explain VRF Implementation for Network Segmentation SD-WAN-ENGINEER Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is the role of a route table in a VRF on a Palo Alto Networks SD-WAN device?

   • AIt determines the bandwidth allocation for each VRF
   • BIt defines the security policies applied to traffic in the VRF
   • CIt stores the routing information for that specific VRF, separate from other VRFs
   • DIt lists all interfaces on the device regardless of VRF
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A hospital network uses VRFs to separate patient-monitoring traffic (VRF-PM) from administrative traffic (VRF-ADMIN). A new application used by clinicians must access a central database that resides in VRF-ADMIN, but the application's servers are in VRF-PM. The security team insists that the two segments remain isolated except for this specific communication. What should the network team configure?

   • ACreate a static route in VRF-PM pointing to the database's IP address via the VRF-ADMIN next hop, without configuring route leaking.
   • BConfigure route leaking between VRF-PM and VRF-ADMIN, allowing only the specific routes needed for the application to reach the database.
   • CPlace the database server in VRF-PM and move the application servers to VRF-ADMIN.
   • DMerge the two VRFs into a single VRF to simplify routing for the application.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   When configuring a VRF on a Palo Alto Networks SD-WAN device, which step is required to associate an interface with the VRF?

   • AAdd the interface to a security policy rule
   • BCreate a static route in the default VRF pointing to the interface
   • CAssign the interface to the VRF in the interface configuration
   • DEnable the interface as a DHCP client
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A managed service provider (MSP) operates a Palo Alto Networks SD-WAN environment for multiple customers. Each customer's traffic must be isolated in its own routing table, but all customers share the same physical SD-WAN appliances at each site. The MSP wants to configure this isolation on the SD-WAN appliances. What should the MSP do?

   • AAssign each customer to a different SD-WAN tunnel and rely on tunnel isolation.
   • BConfigure a separate routing instance only on the hub, not on the branch appliances.
   • CCreate a single VRF and use policy-based forwarding to direct each customer's traffic to different next hops.
   • DCreate a VRF per customer, assign the customer-facing interfaces to the appropriate VRF, and define a separate route table for each VRF.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A company has two VRFs on its SD-WAN appliance: VRF-A and VRF-B. A server in VRF-A must be reachable from VRF-B, but the company wants to avoid configuring route leaking. What is the most appropriate action?

   • AReconsider the requirement and use route leaking to selectively share the server's route.
   • BMerge VRF-A and VRF-B into a single VRF.
   • CPlace the server in both VRFs by assigning its interface to both VRFs.
   • DConfigure a static route in VRF-B pointing to the server's IP address via the VRF-A next hop.
   Reveal Solution Discussion Select an answer first