Palo Alto Networks SD-WAN-Engineer Exam - Topic 3 Question 5 Discussion

Actual exam question for Palo Alto Networks's SD-WAN-Engineer exam

Question #: 5
Topic #: 3

When integrating Prisma SD-WAN with Prisma Access, what is the specific role of the Service Connection (SC)?

AIt connects the Prisma Access cloud infrastructure back to the customer's Headquarters or Data Center for access to internal private resources (e.g., AD, DNS, Intranet).

BIt is the IPSec tunnel that connects a Branch site to the Prisma Access gateway for internet access.

CIt is the SSL VPN portal used by mobile users to connect to the network.

DIt is the peering link between different Prisma Access regions to optimize global traffic.

Show Suggested Answer

Suggested Answer: A

Comprehensive and Detailed Explanation

In the Prisma Access architecture (integrated with SD-WAN), distinct connection types serve different purposes.

Remote Networks: These are the connections from your Branch sites (using ION devices) into the cloud. They allow branches to get to the internet or other branches.

Service Connections (SC): This is a specialized high-bandwidth connection used to bridge the Prisma Access Cloud to your Private Data Center or Headquarters.

The primary use case for a Service Connection (Option A) is to allow mobile users and branch users (who are connected to the Prisma cloud) to reach private, centralized resources that still reside on-premise, such as Active Directory controllers, legacy databases, or mainframes. Without a Service Connection, users in the cloud would be able to reach the internet and each other, but not the servers physically located in your HQ data center. The CloudBlade automates the creation of these tunnels, but architecturally, the 'Service Connection' is the 'cloud-to-HQ' bridge.

by Rikki at Dec 18, 2025, 03:52 AM

Limited Time Offer

25%

Off

Get Premium SD-WAN-Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Teresita

5 days ago

D) Hmm, global traffic optimization? Interesting, but I don't think that's the main purpose of the SC.

upvoted 0 times

...

Kaitlyn

10 days ago

B) Nah, that's the IPSec tunnel for the branch sites. I'm pretty sure the SC is for that cloud-to-HQ connection.

upvoted 0 times

...

Noelia

16 days ago

I vaguely remember something about peering links in the context of global traffic, which might be option D. But I'm not confident about it.

upvoted 0 times

...

Kiera

21 days ago

I feel like the Service Connection has to do with mobile access, but I can't recall if that's related to SSL VPNs or something else.

upvoted 0 times

...

Marla

26 days ago

I'm not entirely sure, but I remember something about IPSec tunnels in a practice question. Could that be option B?

upvoted 0 times

...

Judy

1 month ago

I think the Service Connection is about connecting to internal resources, so I might lean towards option A.

upvoted 0 times

...

Linwood

1 month ago

Okay, I think I've got it. The Service Connection (SC) is the link that connects the different Prisma Access regions to optimize global traffic, so I'm going to select option D.

upvoted 0 times

...

Craig

1 month ago

Hmm, I'm a bit confused. I thought the Service Connection (SC) was used for mobile user access, but option C doesn't seem quite right. I'll need to double-check the documentation to make sure I understand this properly.

upvoted 0 times

...

Tien

2 months ago

The Service Connection (SC) sounds like it's the IPSec tunnel that connects a branch site to the Prisma Access gateway, so I'm going to go with option B.

upvoted 0 times

...

Ahmed

2 months ago

Based on the options, it seems like the Service Connection (SC) is responsible for connecting the customer's on-premises resources to the Prisma Access cloud infrastructure. I think option A is the correct answer.

upvoted 0 times

...