250-589 by Broadcom Actual Free Exam Q&As

Question 1

Which component in Edge SWG is responsible for managing HTTPS traffic decryption and inspection?

A. WebPulse Reputation Service B. Edge Content Analysis Module C. SSL Proxy D. Threat Intelligence Engine

Discussion 0

Correct Answer: C Vote an answer

Question 2

Which action should an administrator take if Edge SWG policies are not being enforced as expected?

A. Disable SSL decryption to avoid interference with policies B. Allow users to modify security policies manually C. Increase bandwidth allocation for all users D. Use the Policy Tracing Tool to verify rule processing order

Discussion 0

Correct Answer: D Vote an answer

Question 3

Which threat risk level would likely be assigned to an unproven URL without an established history of normal behavior?

A. Medium B. Low C. High D. Medium-Low

Discussion 0

Correct Answer: A Vote an answer

Question 4

Which log file should an administrator check when troubleshooting authentication failures in Edge SWG?

A. Packet Capture Logs B. Event Logs C. SSL Certificate Logs D. Threat Intelligence Logs

Discussion 0

Correct Answer: B Vote an answer

Question 5

Which best practices should administrators follow when integrating Edge SWG with cloud security solutions? (Select two)

A. Disable logging for cloud-based applications to reduce data storage usage B. Regularly update security policies to address evolving cloud threats C. Monitor cloud traffic logs for unauthorized access attempts D. Allow users to bypass security policies for cloud services

Discussion 0

Correct Answer: B,C Vote an answer

Question 6

Which actions does Edge SWG take to protect endpoints from malicious web content? (Select two)

A. Blocking access to high-risk domains based on WebPulse intelligence B. Restricting social media access during work hours C. Automatically enabling VPN connections for remote users D. Performing deep content inspection for downloaded files

Discussion 0

Correct Answer: A,D Vote an answer

Question 7

Which best practices should be followed when enforcing corporate web usage policies? (Select two)

A. Customize acceptable use policies based on job roles and departments B. Allow unrestricted access to all web applications C. Automatically bypass content filtering for high-traffic websites D. Regularly review and update web filtering policies to reflect evolving threats

Discussion 0

Correct Answer: A,D Vote an answer

Question 8

Which best practices should administrators follow when configuring SSL decryption in Edge SWG? (Select two)

A. Monitor SSL decryption performance to avoid system overload B. Define an exclusion list for sensitive sites (e.g., banking, healthcare) C. Disable all encryption to improve web browsing speed D. Allow SSL decryption bypass for all user traffic

Discussion 0

Correct Answer: A,B Vote an answer

Question 9

Which Edge SWG security mechanisms help prevent endpoint infections from web-based threats? (Select two)

A. Reducing web security policies to minimize network latency B. SSL decryption to inspect encrypted web traffic for hidden malware C. Real-time categorization of websites to prevent phishing and fraud attempts D. Allowing all downloads from secure (HTTPS) websites without scanning

Discussion 0

Correct Answer: B,C Vote an answer

Question 10

Which troubleshooting steps should be taken if SSL interception is causing websites to break? (Select two)

A. Verify that the Edge SWG root certificate is installed on client devices B. Disable web security policies for HTTPS traffic C. Exclude business-critical applications from SSL decryption D. Allow users to bypass SSL decryption manually

Discussion 0

Correct Answer: A,C Vote an answer

Question 11

What is the primary purpose of role-based access control (RBAC) in Symantec Edge SWG?

A. To replace firewall-based security rules B. To block all external traffic by default C. To enable users to modify their own web filtering policies D. To assign security policies based on user roles and group memberships

Discussion 0

Correct Answer: D Vote an answer

Question 12

How does Symantec Edge SWG intercept and inspect web traffic in an explicit proxy deployment?

A. The firewall forces all outgoing traffic through the Edge SWG appliance B. Traffic is automatically redirected using network address translation (NAT) C. Users connect via a secure VPN tunnel that routes all traffic through Edge SWG D. Users manually configure a proxy or use a PAC file to direct traffic through Edge SWG

Discussion 0

Correct Answer: D Vote an answer

Question 13

Which log type is most useful when troubleshooting authentication failures in Edge SWG?

A. SSL Cipher Strength Logs B. Event Logs C. DNS Cache Logs D. Threat Intelligence Logs

Discussion 0

Correct Answer: B Vote an answer

Question 14

What should an administrator check if Edge SWG is unable to resolve internal domain names?

A. Disable all security policies temporarily B. Force all users to use external DNS servers C. Enable unrestricted access to all websites D. Verify that internal DNS servers are correctly configured

Discussion 0

Correct Answer: D Vote an answer

Broadcom Symantec Web Protection - Edge SWG R2 Technical Specialist - 250-589 Exam Practice Test