Broadcom Endpoint Security Complete Implementation Technical Specialist (250-586) Certification Sample Questions

01. An assessment of a customer migrating to SES Complete records four findings: a regulator requires that management data for one subsidiary stays inside that country; the tool that previously delivered agent packages to endpoints is being retired; the security team wants one common exclusion set applied to all developer workstations; and the customer intends to report threat counts to its board each month.
Which two findings most directly shape the infrastructure design for the migration?
(Choose two.)
a) The single exclusion set the security team wants applied to all developer workstations.
b) The requirement that the subsidiary's management data stays inside that country.
c) The customer's intention to report threat counts to its board each month.
d) The number of custom policies defined in the customer's existing management estate.
e) The retirement of the tool that previously delivered agent packages to endpoints.

02. A customer is drawn to a hybrid SES Complete design because of the local control it keeps for them.
Which trade-off should the consultant set out alongside that benefit?
a) They keep a local management component and its upkeep on top of the cloud services they consume.
b) Policy authored locally reaches only the endpoints in the office that hosts the management component.
c) Reporting on locally managed devices and on the cloud services the customer consumes can never be brought together.
d) Endpoints managed locally can no longer run the same detection and prevention capabilities as cloud-managed ones.

03. During the pilot, the consultant discovers that a group of field laptops spends weeks at a time disconnected from the corporate network. Nothing in the approved design accounts for endpoints that stay offline that long, and the customer confirms this working pattern was never discussed.
How should the consultant treat this finding?
a) As a day-to-day operational matter, picked up after handover once the estate-wide rollout is complete.
b) As a pilot defect, corrected by re-running the affected test cases against the same pilot group.
c) As a functional requirement missed in the Assess phase, to be revisited with the customer.
d) As an infrastructure fault, resolved by adding capacity to the components already deployed.

04. A consultant is deciding which of four discovery findings must appear in the SESC Solution Proposal. All four statements are true of the customer.
Which finding, if it were left out, would most likely force the Solution Infrastructure Design to be reworked after it has been drafted?
a) A set of shop-floor applications that the customer intends to keep running unchanged
b) A single legacy file server that will stay on its existing antivirus product, reachable over the same network path as the rest of the estate
c) A preference for reporting to the customer risk committee weekly rather than monthly
d) A production segment whose workstations have no outbound path to the internet

05. A test case in the Solution Test Plan reads: from a managed endpoint, attempt an outbound connection the design does not permit, then confirm the attempt is blocked and recorded.
Which configured protection technology does this test case validate?
a) SONAR
b) Firewall
c) Intrusion Prevention
d) Device Control

06. A consultant is working through the Implement Phase for a customer whose management infrastructure is already standing and reachable from the endpoints in scope. The accepted Solution Configuration Design states which protection technologies are enabled for each population of endpoints and the settings each population requires.
Which activity carries that Solution Configuration Design into the customer's environment?
a) Capturing the customer's existing group structure and threat landscape so that appropriate settings can be chosen for each population of endpoints.
b) Recording the placement of the management components and the communication paths endpoints will use.
c) Building the device and policy groups the design names, then applying the designed settings to each of those groups.
d) Running every case in the Solution Test Plan to confirm that each enabled protection technology behaves as the design intended.

07. A customer's own security policy forbids endpoints from reaching internet services except through the corporate proxy, and the customer's remote sites share a constrained link. A draft Solution Infrastructure Design states only that all endpoints will enroll into the cloud console and receive content from the cloud services.
Which critique of the draft is best supported?
a) It relies on the cloud console being sized for the estate, which the draft never establishes
b) It commits the customer to enabled features and settings the Configuration Design has not listed
c) It omits the acceptance criteria that would let enrollment be judged and signed off
d) It assumes a route the customer's policy forbids and omits how remote sites obtain content

08. A consultant is splitting Design phase content between the Solution Infrastructure Design and the Solution Configuration Design for a cloud-managed engagement.
Which items belong in the Solution Configuration Design?
(Choose three.)
a) The delivery method used to build and get agent installation packages to each site
b) The policy settings applied to each device group and the features they enable
c) The enrollment method used to bring existing endpoints under management
d) The network paths each device group's agents use to reach the management surface
e) The device group and policy group structure the estate is divided into
f) The exception handling that lets a line-of-business application keep running under policy

09. A consultant reviews a colleague's implementation task list for an engagement whose validated design is cloud-managed. One line reads: install the SES management console on a customer-hosted server.
What is wrong with that task?
a) A cloud-managed design uses a hosted management surface, so no local console is installed.
b) It should be scheduled after the local endpoint agents have been delivered, rather than before them.
c) It belongs to the Solution Configuration Design rather than to the Solution Infrastructure Design work.
d) It is a Design-phase activity, since whether management is cloud-hosted or locally installed is decided before Implement begins.

10. The Manage phase includes an objective in which the consultant makes the customer aware of the resources available to them for keeping the deployed solution effective over time.
Which set of resources does that objective name?
a) The Solution Infrastructure Design, the Solution Configuration Design and the test plan produced alongside them
b) Use cases, functional requirements and the proposal validated at the end of Assess
c) Enablement, education, support and documentation
d) Pilot results, agent rollout schedules and engagement close-out records