Silver Peak SDWAN Professional (SPSP) Exam

Business intent drives your applications, not your network, and network resources are priority-driven to match the business criticality of every application. In the past few years, the industry has seen more than 60 companies market SD-WAN as part of their offerings.

Most include basic SD-WAN features such as the ability to use multiple forms of transport, dynamic path selection, centralized management, zero-touch provisioning and encrypted connections. However, they do not deliver on the vision of a business-first networking model.

Below is the list of Multiple Choice Questions of SDWAN exam (SPSP) you can practice:

Question 1: True or False: Transmission rate of a UDP video stream will always decrease when there is loss and no FEC, because of latency and the required retransmissions.

A. False
B. True

Question 2: True or False: If you are using upstream stateful firewalls (e.g. Palo Alto on the WAN side), an asymmetric flow will generally establish a connection, but cannot be TCP accelerated.

A. False
B. True

Question 3: True or False: Silver Peak Cloud Portal is a customer-managed device.

A. False
B. True

Question 4: Which of the following is true of a passthrough tunnel?

A. Traffic sent through a passthrough tunnel is encrypted by the appliance using 128 bit AES encryption
B. Traffic sent through a passthrough tunnel is encrypted by the appliance using 256 bit AES encryption
C. Traffic sent through a passthrough tunnel could exit on any selected LAN side interface
D. Traffic sent through a passthrough tunnel could exit on any selected WAN side interface
E. Traffic sent through a passthrough tunnel is unencapsuiated

Question 5: In which of the following situations would Forward Error Correction (FEC) be LEAST likely to improve performance?

A. Low latency WAN connection with high loss not due to congestion
B. High latency WAN connection with high loss not due to congestion
C. High latency WAN connection with high loss due to congestion

Question 6: True or False: An interface with a label of “Voice” will only pass VoIP or similar h.323 voice traffic,

A. True
B. False

Question 7: Which type of encryption is used by Silver Peak EdgeConnect IPsec tunnels?

A. 1024 bit LZ
B. 128 bit AES
C. 512 bit AES
D. 256 bit AES
E. 256 bit QED

Question 8: Which best describes “Business Intent Overlays”?

A. They define physical interface configuration (VLANs, link speed etc.).
B. They are templates defining the criteria which will be used by Orchestrator to automatically create the overlay connections between appliances
C. None of the other answers is correct
D. They define how appliances will communicate with the cloud portal.

Question 9: If your EdgeConnect appliance is in a private network without access to the internet, and you need to register it with the Cloud Portal, which of the following is a possible solution?

A. None of the other answers are possible solutions
B. Use another appliance as a web proxy
C. Use the Cloud Portal as a web proxy
D. Use the Orchestrator as a web proxy

Question 10: True or False: If an EdgeConnect fails to appear in the discovered appliances list within 5 minutes of completing the installation wizard, you can manually add it by right clicking in tree view and adding its management IP address.

A. True
B. False

Question 11: Which of the following could keep a tunnel from coming up?

A. A LAN interface with an incorrect label
B. An WAN interface with an incorrect label

Question 12: What are “Interface Labels” used for? (Choose 2)

A. The Orchestrator can apply these as a part of a Deployment Profile
B. Orchestrator will attempt to build tunnets between WAN interfaces with the same label
C. They indicate the interface IP address to be used
D. They determine which senate provider a LAN interface will be connected to

Question 13: Which of the following is true of Silver Peak’s Zone Based Firewall? (Choose 4)

A. Overtays must be in a different Zone from any of the interfaces
B. You can define rules using ACLs to Permit or Deny traffic between any two zones
C. Traffic is always permitted between devices in the same zone
D. Each Business Intent Overiay is part of a zone
E. All the Business Intent Overlays must be in different zones from each other
F. Each interface is part of a zone

Question 14: Which of the following are true regarding asymmetric flows? Choose all that apply

A. Asymmetric flows cannot be TCP accelerated
B. You will see “0” bytes on the inbound side only
C. Asymmetric flows can have network memory reduction in one direction
D. They usually show ‘0’ bytes in one direction in the flow table
E. You will see “0″ bytes on the outbound side only

Question 15: What option should you use if doing a Ping from an EdgeConnect appliance?

A. -T
B. -x
C. -I (upper case)
D. -I (lower case)

Question 16: True or False: SDWAN devices from multiple vendors typically DO NOT communicate to form an SDWAN overlay.

A. True
B. False

Question 17: True or False: If you are concerned about congestion, a 1:1 FEC ratio is preferred over a 1:20 FEC ratio.

A. True
B. False

Question 18: The Orchestrator can display license information for… (Choose all that are correct)

A. Unlimited
B. All registered Silver Peak appliances
C. All the software on ail the devices in your network, including Windows and Apple devices
D. The Orchestrator
E. Boost Licenses
F. 50 Mbps

Question 19: Which best describes the Boost license?

A. Required for alt appliances
B. Enables throughput above 200 Mbps
C. It is required for BGP or OSPF
D. Enables TCP acceleration and Network Memory (dedupiication)

Question 20: Which of the following define both the appliance’s WAN interface speeds and labels applied to all interfaces?

A. Business Intent overlays
B. Overlay ACLs
C. Deployment Profiles
D. Underlay definitions

Question 21: Which of the following is true of the Peer Unavailable action? (Choose 2)

A. Peer Unavailable means the packet didn’t match any overlays and will be matched to the default route policy of 65535
B. A peer unavailable action of Drop means the packet will be dropped out of the overlay and forwarded to the next hop router on wan0 outside of a tunnel (unencapsulated).
C. The Peer Unavailable action will be performed ONLY if all tunnels to the destination peer are down
D. If a route / subnet table lookup is done on a packet that matches a BIO, and there is no match, the Peer Unavailable action will be performed
E. It is possible to put a packet hitting the Peer Unavailable action into a passthrough tunnel on any WAN side interface.

Question 22: True or False: Two Silver Peak appliances can share a virtual IP address with VRRP, providing a redundant backup capability in the event one of them were to go down.

A. True
B. False

Question 23: Which best describes the Mini, Base or Plus licenses?

A. They don’t enable the use BGP or OSPF by themselves
B. They enable throughput above 200 Mbps
C. They enable TCP acceleration and data reduction
D. Previous version of licenses that nave been replaced by the new bandwidin tiers

Question 24: Which of the following Link Bonding Policies uses FEC (Forward Error Correction)? (Choose all that apply)

A. High Quality
B. High Throughput
C. High Availability
D. High Efficiency

Question 25: True or False: Router mode requires you to configure RIP, BGP or OSPF on the Silver Peak EdgeConnect appliance.

A. True
B. False

Question 26: Which of the following statements is correct? (Choose three)

A. The Cloud Portal will find a customer’s Orchestrator and notify it when an appliance tnes to register, even if the Orchestrator Is not yet registered with the Cloud Portal
B. The Account Name and Account Key obtained from Silver Peak, and used to register the Orchestrator, is the same on the appliances
C. An Appliance must have a permanent IP address in order to register with the Cloud Portal
D. An appliance must have an IP address in order to register with the Cloud Portal
E. The first step in setting up your SDWAN network is to have the Orchestrator installed, configured, and registered with the Silver Peak Cloud Portal.

Question 27: Which is NOT true about “Passthrough Traffic”?

A. It can be sent unshaped
B. It can be sent shaped
C. It sent through a tunnel to another Silver Peak appliance
D. It can be sent through a passthrough tunnel out a specific WAN interface
E. It is sent unencapsulated

Question 28: Who manages the Cloud Portal?

A. Each customer logs into the cloud portal and manages their own account
B. Amazon Web Services
C. Silver Peak Sales Order Fulfillment
D. Chinese hackers
E. Azure customer suport

Question 29: Which of the following is true of bridge mode?

A. Drawbridge mode is required to bypass certain kinds of traffic
B. You must configure WCCP or PBR to redirect traffic to the appliance
C. No traffic redirection is required for traffic to flow through the appliance
D. Traffic will never pass through the appliance if it goes down

Question 30: True or False: In the event of a link failure, EdgeConnect supports stateful failover of traffic between parallel paths between two appliances.

A. True
B. False

Question 31: True or False: When using zero-touch provisioning, you need to manually configure the Account Name and Account Key for both physical and virtual appliances.

A. True
B. False

Question 32: True/False: EdgeConnect devices encrypt data at rest in the disk cache and they also encrypt data in transit through IPSec tunnels.

A. False
B. True

Question 33: True or False: A packet capture utility is available on EdgeGonnect appliances,

A. True
B. False

Question 34: Minimally, which license(s) are required to provide a path for Cloud applications like Office 365, and you expect 100 Mbps throughput?

A. 50 Mbps
B. Unlimited
C. 200 Mbps
D. 1 Gbps
E. 500 Mbps
F. 2 Gbps

Question 35: True or False: When using the Zone Based Firewall, traffic is always dropped between devices in different zones unless specifically permitted

A. False
B. True

Question 36: True or False: EdgeHA and Traditional HA modes are the same except Traditional HA devices must run BGP or OSPF.

A. False
B. True

Question 37: It is possible for devices at a site with an EdgeConnect appliance having only one WAN interface which is WAN hardened to connect directly to sites on the Internet without that traffic traversing an IPSec tunnel first.

A. True
B. False

Question 38: True or False: The Orchestrator can manage legacy NX, VX and VRX devices as well as EdgeConnect devices.

A. False
B. True

Question 39: Which are true regarding EdgeConnect Appliances? (Choose all that apply)

A. They can be managed by the Orchestrator
B. They have a web-based management interface
C. They can be physical
D. They can be virtual
E. They have a command line interface

Question 40: When you are using PBR or WCCP, where should you never apply traffic redirection?

A. On the router interface where servers are connected
B. On the router interface where the end devices are connected
C. On the bypass interface
D. On the router interface where the appliance is connected

Question 41: What option should you use if doing a Ping from an EdgeConnect appliance?

A. -x
B. -I (upper case)
C. -T
D. -I (lower case)

Question 42: You have network with two sites with a Max Bandwidth setting of 1 Mbps. The two appliances are each licensed for 500 kpbs of boost. All the traffic between the sites uses TCP for a transport. Which of the following is true?

A. The overall traffic flow between the sites will never fill the 1 Mbps link and will be limited to 500 kbps.
B. 500 kbps of the traffic will be accelerated and anything above that will be sent passthrough, up to 1 Mbps
C. 500 Kops of the traffic will be accelerated and anything above that will be sent through a tunnel, but not TCP accelerated
D. All traffic will be dropped and you will be ticketed for exceeding the speed limit.

Question 43: True or False: Router Mode can forward Passthrough traffic between any Interface. It acts just like a router for local traffic.

A. False
B. True

Question 44: True or False: Zero Touch Configuration (ZTC) allows an appliance to be automatically configured, including IP addresses and routing protocols through the use of YAML preconfiguration files.

A. False
B. True

Question 45: Atypical SLA from a service provider for an MPLS connection allows for loss of…

A. 0 to 5.0 percent
B. 01 to 05 percent
C. 1 to .5 percent
D. 5 to 10 percent
E. 5 to 1.0 percent

Question 46: True or False: Selecting a device in Tree View affects whether information about it is displayed in the main screen,

A. False
B. True

Question 47: True or False: Each appliance in an EdgeHA pair has access to the other devices WAN side connections

A. True
B. False

Question 48: What “Brownout” thresholds can you configure for each Business Intent Overlay? (Choose three.)

A. Throughput
B. Link Speed
C. None of the other answers is correct, Brownout means that a link will fail gracefully and should never be taken out of production.
D. Packet Loss
E. Jitter
F. Latency

Question 49: Which of the following is the EdgeConnect management software?

A. Appliance Manager
B. Customer Cloud Portal
C. Cloud Portal
D. Orchestrator
E. EdgeConnect Appliance

Question 50: Which of the following is NOT true of WAN hardening on an interface? Choose the incorrect statement.

A. Internet traffic backhauled through another site can enter a WAN hardened interface through an IPSec tunnel
B. Unencapsulated packets (those not in a tunnel) entering a hardened interface will be dropped
C. It is not possible for appliances to reach the Silver Peak Cloud Portal through a hardened interface attached to the Internet
D. Direct connections {those not passing through a Silver Peak IPSec tunnel) to sites on the Internet like Google will be blocked through WAN hardened interfaces
E. When WAN hardening is enabled, traffic coming into the site from Silver Peak IPSec tunnels is allowed to enter

Question 51: What are some of the sections of the flow detail? (Choose all that apply)

A. Optimization
B. User login ID
C. QoS
D. Security
E. Stats
F. Route
G. Deployment profile

Question 52: Which of the following best describes the EdgeConnect appliance license period?

A. The license is applied by the user and Is good for the Life of the appliance
B. They are licensed by Silver Peak at the factory and it is good for the life of the appliance
C. They are licensed by the cloud portal for a rolling 1 year window
D. An appliance that has an expired license will forward traffic to the destination, but will not apply boost
E. They are licensed by the cloud portal for a rolling 30 day window

Question 53: What is the typical WAN latency for cross-country traffic in the USA?

A. 10-20 mSec
B. 550+ MSec
C. 60-120 mSec
D. 30-80 mSec
E. 150-200 mSec

Question 54: Which of the following are causes of latency? (Choose 3)

A. Distance
B. A link bonding policy of High Availability
C. Loss (which can give the appearance of latency)
D. Jitter
E. Hop by Hop equipment processing overhead
F. A link bonding policy of High Quality

Question 55: Which section of the flow detail will tell you the ingress and egress zones and whether the flow was permitted?

A. Security
B. Route
C. Stats
D. Optimization
E. NAT
F. QoS

Question 56: When using WAN Hardening, all WAN interfaces must be hardened.

A. True
B. False

Question 57: True or False: The operator must log in to the Cloud Portal to view the number of used and remaining licenses for EdgeConnect appliances.

A. False
B. True

Question 58: Which of the following Link Bonding Policies requires at least two active primary links and uses 1:1 FEC?

A. High Efficiency
B. High Throughput
C. High Availability
D. High Quality

Question 59: Which best describes an overlay network?

A. A set of logical connections that have traffic placed in them according to whether they matched an interface label or access list
B. Physical transport connections between appliances
C. Al list of the IP addresses applied to each appliance
D. The labels affixed to the ports on physical appliances

Question 60: True or False: You have a web server on your local internal network with a LAN side address of 10.10.10.1. Inbound Port Forwarding allows a user on the WAN side of an appliance which is using Stateful+SNAT on all WAN interfaces, to connect directly to the server with a url of https://10.10,10.1.

A. False
B. True

Question 61: True or False: When a physical EdgeConnect appliance in bridge mode fails (i.e. a power failure), the appliance will start rate limiting traffic to the link speed of the slowest link.

A. False
B. True

Question 62: True or false: “Cloud Portal” is another name for the Orchestrator.

A. True
B. False

Question 63: True or False: The flow detail does not contain the incoming source address and outbound translated address of a flow that is being NAT’d by an appliance. You need to look in the address translation table on the appliance for that information.

A. True
B. False

Question 64: True or False: The flow detail does not contain the incoming source address and outbound translated address of a flow that is being NAT’d by an appliance. You need to look in the address translation table on the appliance for that information.

A. True
B. False

Question 65: True or False: Deployment Profiles define the number of tunnels between a device and the Orchestrator and a Business Intent Overlay defines the link speeds for all connections.

A. True
B. False

Question 66: Which best describes the Mini, Base or Plus licenses?

You may also like: