What allows enforcement of policies based on business intent, enables dynamic path selection, and provides visibility into performance and availability for applications and networks?

Question

Options

• AIdentity Access Management (IAM) methods
• BFirewall as a Service (FWaaS)
• CInstant-On Network (ION) devices
• DCloud Access Security Broker (CASB)

• B
  93% (27)
• C
  3% (1)
• D
  3% (1)

Explanation

Important note: The stated correct answer of B (FWaaS) appears to be a mismatch with the description. The features described - dynamic path selection, business-intent-based policies, and application/network performance visibility - are the defining characteristics of SD-WAN, which in Palo Alto's Prisma SASE architecture is delivered via ION devices (option C).

Why C (ION devices) is the better answer: Palo Alto's ION devices are the SD-WAN branch appliances that perform dynamic path selection across WAN links, enforce application-aware routing policies driven by business intent (e.g., "send voice traffic over the best-performing link"), and provide granular visibility into application and network performance.

Why the distractors are wrong:

• A (IAM): Handles user identity and access permissions, not path selection or network performance.
• B (FWaaS): Provides cloud-delivered firewall security policy enforcement, but does not do WAN path selection or performance monitoring.
• D (CASB): Governs access to SaaS/cloud applications, focused on data security and compliance - not routing or availability.

Memory tip: Think SD-WAN = Smart Driving of traffic - ION devices are the "smart drivers" that pick the best road (path) in real time based on business priorities.

If this question is from an official practice exam, double-check the answer key - there may be a typo and C is likely the intended correct answer.

No community discussion yet for this question.