Broadcom ZTNA Complete Technical Specialist (250-583) Certification Sample Questions

01. A tenant needs a new collection so that a newly formed team can administer its own applications and policies.
Who creates the collection and delegates the permissions over it?
a) The Site Editor for the site the team will publish through
b) The Collection Application Owner named for the new team
c) The tenant administrator
d) The Collection Policy Owner, once the first policy exists

02. An internal auditor has been given the Tenant Viewer role.
What does that role permit?
a) Viewing the tenant's resources and changing its settings
b) Viewing the tenant's resources and settings
c) Viewing and editing the applications inside a single collection
d) Viewing every site and deploying connectors where they are missing

03. A contractor opened an application they should never have been able to reach. An administrator proposes turning on event logging for that site so that it cannot happen again.
What is the flaw in the proposal?
a) A log records what happened; a policy decides what may happen
b) Event logging can be turned on only for applications that were published as web applications
c) The log would hold nothing, because a contractor's activity is not recorded
d) Logging would answer it, but only once the contractor exists as a local user in the tenant

04. A business unit asks for an arrangement in which its own administrators own its applications and the policies governing them, without touching anything belonging to other units. Its applications run in a data center the tenant already represents.
What should be created for them?
a) A second site for the same data center, so their resources sit behind a boundary of their own
b) A separate tenant, so that their administrators are isolated from the rest of the organization
c) A connector of their own, deployed for the applications the unit runs
d) A collection, the administration boundary for a set of applications and policies

05. An administrator starts a new deployment by writing the access policies first, and finds there is nothing to select where the policy should name the resources it governs.
What explains this?
a) The policies are waiting on the health check that runs when an application is saved
b) Policies can only be written by a tenant administrator, and the account holds a collection role
c) The applications the policy should name have not been configured yet
d) Policies have to be created inside a segment before they can name a resource

06. A newly saved RDP application comes back healthy.
What follows from that result?
a) It becomes enabled and accessible to the users a policy permits.
b) It stays pending until an administrator confirms the result.
c) It becomes reachable by any device that carries the agent.
d) It is added to the tenant's event log configuration as a monitored object.

07. An application shows as healthy and enabled in the Admin Portal, and the site it is published through is serving other applications normally. One group of users still cannot open it.
Where should the administrator look?
a) At the connector for the site, which may not have been deployed
b) At whether the application should be disabled and enabled again
c) At the health checks the system ran when it was saved
d) At the access policy for the application and the users it permits

08. During planning, a team is compiling what the deployment needs to know about the people who will use it.
Which input matters because the device itself forms part of every access decision?
a) Which users move most often between the organization's offices
b) How many applications a typical user opens during a working day
c) Which users bring devices the organization does not manage
d) Which users already hold administrator roles in the organization's other systems

09. A newly saved RDP application comes back healthy.
What follows from that result?
a) It stays pending until an administrator confirms the result.
b) It becomes enabled and accessible to the users a policy permits.
c) It becomes reachable by any device that carries the agent.
d) It is added to the tenant's event log configuration as a monitored object.

10. An administrator who holds the tenant viewer role has been asked to help the operations team by deploying a connector for one of the sites, and finds that they cannot.
What explains this?
a) A tenant viewer can view settings but cannot change them
b) Deploying a connector calls for the collection application owner role
c) Connectors can be deployed only by a tenant administrator
d) The site has not yet been linked to a collection