250-583 시험 - Broadcom실제시험문제와 답 - 110문항

Question No : 1

In a hybrid IDP model, why might you implement OIDC alongside SAML?

A.Mobile apps often prefer OIDC tokens over SAML assertions
B.OIDC supports XML signatures
C.SAML does not allow MFA
D.Connector firmware only parses OIDC

정답:
Explanation:
Modern native clients leverage OIDC.

Question No : 2

What Planning Guide metric determines expected Connector CPU cores?

A.Concurrent session peak per minute
B.Number of admin roles
C.Total Sites
D.TLS cipher list length

정답:
Explanation:
Sessions drive CPU sizing.

Question No : 3

Which two consequences result from enabling Full Packet Capture on a Connector?

A.Increased disk usage and potential performance impact
B.Deep forensic analysis capability
C.Auto application discovery is disabled
D.Agent posture checks are skipped

정답:
Explanation:
Captures consume resources but add forensic detail.

Question No : 4

A Just-in-Time Policy can be triggered by which automation?

A.SOAR playbook that detects critical vulnerability exposure
B.Daily cron job on the Connector host
C.Browser local-storage event
D.Manual CSV import

정답:
Explanation:
SOAR can call APIs to create time-bound rights.

Question No : 5

Why should Connector host clocks be NTP-synchronized?

A.Ensures correct TLS certificate validation and log ordering
B.Improves TCP slow-start algorithms
C.Reduces SAML assertion size
D.Allows SIEM to auto-discard duplicates

정답:
Explanation:
Accurate time is vital for security events.

Question No : 6

What condition triggers Policy Shadowing warnings in the Admin Console?

A.A new rule duplicates but is lower priority than an existing rule
B.DLP fingerprints overlap
C.Connector logs exceed 1 GB/day
D.An application is unmapped to any Site

정답:
Explanation:
Overlapping rules can render lower ones ineffective.

Question No : 7

Which two data points does Risk Analytics combine to produce a user risk score?

A.UEBA anomaly patterns
B.External threat-intel matches
C.Connector CPU utilization
D.SIEM storage quota

정답:
Explanation:
Analytics merges behavior and threat context.

Question No : 8

A Cloud DLP fingerprint is updated.
What immediate ZTNA action is required?

A.No action―DLP updates propagate automatically to connected Sites
B.Re-publish all access policies
C.Restart all Connectors to reload fingerprints
D.Clear policy staging cache

정답:
Explanation:
Cloud service automatically syncs fingerprints.

Question No : 9

Which function does the Site Redundancy Score represent?

A.Measurement of active Connectors vs. policy-defined min count
B.Percentage of Sites using agentless apps only
C.Ratio of audit events to policy events
D.Time taken for DNS to propagate split-horizon changes

정답:
Explanation:
Score reflects connector redundancy health.

Question No : 10

A new Admin Portal release introduces an updated UI.
Which best practice minimizes admin confusion?

A.Review release notes and conduct sandbox testing before production rollout
B.Disable two-factor authentication temporarily
C.Purge browser cache on all admin laptops via MDM
D.Revoke existing admin roles and reassign

정답:
Explanation:
Sandbox testing familiarizes staff without impacting live tenants.

Question No : 11

Which step ensures that fallback routing does not bypass ZTNA controls?

A.Lock client DNS to the Connector or SWG addresses
B.Advertise a default route from the Connector to core routers
C.Enable DNSSEC validation on end-user devices
D.Disable local proxy PAC files

정답:
Explanation:
Controlling DNS keeps traffic in the ZTNA path.

Question No : 12

Enabling per-app bandwidth quotas in ZTNA helps primarily with:

A.Preventing resource starvation by noisy services
B.Reducing TLS handshake counts
C.Lowering DLP false positives
D.Accelerating connector upgrades

정답:
Explanation:
Quotas avoid one app monopolizing connector capacity.

Question No : 13

Why is TLS 1.3 preferred for ConnectorCCloud communications?

A.Provides forward secrecy and faster handshakes
B.Allows static RSA key reuse
C.Enables clear-text JA3 fingerprinting
D.Supports GRE encapsulation natively

정답:
Explanation:
TLS 1.3 improves security and performance.

Question No : 14

Which portal report helps forecast when additional Connectors will be needed?

A.Peak Concurrent Session Trend
B.DLP Incident Heatmap
C.Audit Trail Volume
D.Policy Violation Summary

정답:
Explanation:
Growth in peak sessions signals scaling requirements.

Question No : 15

In the Authentication tab, selecting “Force Re-auth after 8 hours” primarily mitigates:

A.Token theft and replay during long sessions
B.DNS cache poisoning
C.Connector overload from idle sockets
D.Log bloat in SIEM

정답:
Explanation:
Periodic re-authentication limits token misuse windows.

Broadcom 250-583 시험