Online Access Free 250-583 Exam Questions

A tenant wants to enforce different MFA settings per application. Where is the correct place to configure?

• A.At the Connector level using local user maps
• B.In the IDP's application-specific conditional access policies
• C.Within the ZTNA Admin Console under Global Authentication
• D.Inside DLP policy definitions

In Symantec ZTNA, which feature combination best mitigates lateral movement while ensuring data compliance for unmanaged (BYOD) endpoints?

• A.Agent-less access + Cloud DLP inspection
• B.Site segmentation + Threat Intelligence Services (TIS) feeds
• C.Network Security Boundary + zero-log retention
• D.Agent-based posture checks + DNS tunneling

During log-shipping configuration, which parameter ensures message order and integrity when forwarding to a cloud-hosted SIEM?

• A.Time-sliced gzip batching
• B.TLS mutual authentication between Connector and SIEM
• C.Base64 encoding of entire log stream
• D.UDP transport with jumbo frames

Why might you keep Legacy VPN active in parallel during initial ZTNA go-live?

• A.Enables Connector GRE encapsulation
• B.Reduces SIEM license costs
• C.Allows TLS 1.0 traffic
• D.Provides temporary fallback while confidence builds

If you exceed the recommended 60-application limit per Site, what operational risk increases?

• A.Immediate revocation of Symantec support
• B.Automatic migration to agent-only mode
• C.IDP token bloat that breaks SAML assertions
• D.Connector resource exhaustion leading to session drops