250-583問題集、Broadcom実際の試験問題

質問 1

Which step ensures that fallback routing does not bypass ZTNA controls?

A. Disable local proxy PAC files

B. Advertise a default route from the Connector to core routers

C. Lock client DNS to the Connector or SWG addresses

D. Enable DNSSEC validation on end-user devices

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 2

A scheduled Policy Report shows a spike in "Access Denied - Risk High" events.
Which tuning action is most appropriate?

A. Disable DLP inspection on low-risk apps

B. Increase Connector idle timeout to prevent re-authentications

C. Add user subnet to the Network Boundary "Trusted" list

D. Review TIS risk-score thresholds in the affected policy

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 3

What is the operational impact of disabling the Connector Auto-Upgrade setting?

A. Policy changes require Connector restarts

B. Admin Console automatically locks Tenant Admin session

C. Longer maintenance windows and manual patch schedules

D. Connector health checks cease until upgrades complete

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 4

Which two statements about Connector host prerequisites are correct?

A. Outbound TCP 443 and UDP 123 (NTP) must be permitted

B. Swap space must be disabled to reduce context-switch latency

C. Host must expose a dedicated GPU for TLS acceleration

D. Linux kernel must support epoll-based I/O for high concurrency

正解: A,D

解説: (PassTest メンバーにのみ表示されます)

質問 5

A ZTNA Policy Simulator indicates "Unmatched" for a test request.
Which next step best pinpoints the gap?

A. Verify application is mapped to correct Site and Collection

B. Change token lifetime in IDP

C. Increase simulator verbosity

D. Restart the Connector in safe mode

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 6

In a Brownfield Migration, what tool assists mapping VPN subnets to ZTNA app objects?

A. Manual spreadsheet import

B. Network Discovery Scan in the Admin Console

C. SIEM correlation rule export

D. TLS packet sniffer

正解: B

解説: (PassTest メンバーにのみ表示されます)

質問 7

A delegated admin must be able to create Policies but not modify Authentication settings.
Which RBAC design satisfies the requirement?

A. Assign "Policy Admin" role at Tenant level

B. Clone the "Tenant Admin" role and disable Authentication edit rights

C. Grant "Site Manager" privileges plus SIEM read access

D. Assign "Policy Admin" role to a specific Collection

正解: D

解説: (PassTest メンバーにのみ表示されます)

Broadcom Symantec ZTNA Complete R1 Technical Specialist - 250-583 模擬練習