4.3 Identify and Describe Network Setting Configurations to Support IoT Device Connectivity Based on Device-ID SD-WAN-ENGINEER Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A company has a mix of IoT devices and regular workstations on the same subnet. Device-ID is not classifying the IoT devices correctly because the traffic patterns are similar. What is the best network setting change to improve Device-ID classification?

   • AAssign static IPs to the IoT devices and add them to a Device-ID allow list.
   • BEnable Device-ID on the workstation subnet to capture more traffic.
   • CIncrease the Device-ID inspection interval on the subnet.
   • DSegment the IoT devices into a separate VLAN and subnet, then add that subnet to Device-ID.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which network setting is commonly configured to support IoT device connectivity based on Device-ID?

   • ANTP server settings for time synchronization
   • BFirewall zone names for the internet
   • CDNS server addresses for the corporate domain
   • DSubnets and IP ranges assigned to IoT devices
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A hospital is adding a new IoT device type (smart beds) to an existing subnet that already has other IoT devices. The smart beds must be classified separately from the existing devices. What is the correct configuration step?

   • AAdd the smart beds to a new subnet and include that subnet in Device-ID network settings.
   • BEnable Device-ID on the existing subnet and rely on traffic patterns to distinguish the smart beds.
   • CConfigure a static IP for each smart bed and add them to the Device-ID allow list.
   • DDisable Device-ID on the existing subnet and enable it on a new interface.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A retail chain has smart cameras on a VLAN (10.10.5.0/24) that must be reachable only from the NVR system. Device-ID has identified the cameras correctly. However, traffic from the NVR to the cameras is being blocked by a security policy. What should be configured to allow this communication while still enforcing the Device-ID-based policy?

   • ADisable the security policy for the camera subnet to allow all traffic.
   • BCreate a security policy that allows traffic from the NVR's IP to the camera subnet, referencing the Device-ID tag for cameras.
   • CAdd a static route on the NVR to reach the camera subnet directly.
   • DMove the cameras to a different VLAN that has no security policy.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What is the primary role of Device-ID in a Palo Alto Networks SD-WAN environment?

   • ATo encrypt all traffic between IoT devices and the cloud
   • BTo assign IP addresses to IoT devices automatically via DHCP
   • CTo identify and classify devices on the network so that security policies can be applied based on device type
   • DTo provide a physical network port for each IoT device
   Reveal Solution Discussion Select an answer first