Symantec ZTNA Complete R1 Technical Specialist (250-583) Free Practice Test

Question 1

Which function does the Site Redundancy Score represent?

A. Measurement of active Connectors vs. policy-defined min count

B. Percentage of Sites using agentless apps only

C. Time taken for DNS to propagate split-horizon changes

D. Ratio of audit events to policy events

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

Which two integrations enhance visibility for unmanaged IoT devices that cannot run the Symantec Agent?

A. SPAN/TAP port feeding traffic to a discovery Connector

B. TIS dynamic reputation look-ups for device IPs

C. Agent-based posture checks with relaxed policies

D. DHCP server logging into the SIEM for MAC correlation

Correct Answer: A,B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 3

Why would you map an internal legacy SMTP service as an agent-based application instead of agentless?

A. DLP cannot inspect SMTP payloads via agent

B. Non-browser protocols need tunnel-based agent control

C. Agentless mode supports only HTTPS with Web-socket upgrade

D. SMTP uses SAML authentication natively

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 4

What happens if a Connector health check fails while streaming logs to an external SIEM?

A. The Admin Console suspends DLP inspection to reduce load

B. Health-check events are forwarded through alternate Connectors in the Site

C. Log traffic is queued locally until the Connector recovers

D. The Site automatically switches to passive mode, denying all access

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

Which two elements must align for an Access Policy containing a Data Governance condition to trigger?

A. Matching IDP group claim in the user's token

B. Correct DLP policy assigned to the application

C. Connector deployed in discovery mode

D. Application traffic routed through Cloud SWG

Correct Answer: A,B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 6

In an environment requiring strict geo-fencing, what combination of features ensures users outside approved regions are blocked at authentication time?

A. DNS filtering only

B. Connector ACLs based on IP subnets

C. IDP conditional access rules + ZTNA contextual policy

D. Disabling token refresh for roaming devices

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 7

Why should Connector host clocks be NTP-synchronized?

A. Improves TCP slow-start algorithms

B. Allows SIEM to auto-discard duplicates

C. Reduces SAML assertion size

D. Ensures correct TLS certificate validation and log ordering

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 8

An Export Compliance rule blocks traffic to sanctioned countries. Where is the geo-location detected?

A. SWG does DNS Geo lookup

B. IDP embeds country code in SAML token

C. Device posture check reads locale setting

D. Connector evaluates client IP against GeoIP DB

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 9

Which feature enforces data-loss prevention for files uploaded via WebDAV?

A. Cloud SWG inline scanning tied to ZTNA tunnel

B. SIEM regex alert post-processing

C. Agent posture check with file hash comparison

D. Threat Intelligence URL categorization

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Welcome to TestSimulate

Broadcom Symantec ZTNA Complete R1 Technical Specialist (250-583) Free Practice Test