QUESTION 25
Which two outcomes occur when you define multiple Network Security Boundaries that overlap IP ranges?

QUESTION 26
In an environment requiring strict geo-fencing, what combination of features ensures users outside approved regions are blocked at authentication time?

QUESTION 27
Which benefits of Symantec’s SASE solution directly address the shortcomings of traditional perimeter firewalls?

QUESTION 28
Finally, what is the primary objective of Symantec ZTNA within the broader SASE framework?

QUESTION 29
Which two tasks are automatically logged when a Site is deleted from the Admin Console?

QUESTION 30
A DevOps team requests temporary shell access to an internal build server.
Which ZTNA capability can grant least-privilege, time-bound access?

QUESTION 31
Why should policy object names follow a strict naming convention (e.g., BU-APP-SENS)?

QUESTION 32
A multi-tenant MSSP manages several customer ZTNA tenants.
Which practices streamline operations while preserving tenant isolation?

QUESTION 33
If you exceed the recommended 60-application limit per Site, what operational risk increases?

QUESTION 34
Why would you map an internal legacy SMTP service as an agent-based application instead of agentless?

QUESTION 35
Why might Connector CPU pinning be recommended on multi-tenant boxes?

QUESTION 36
In a hybrid IDP model, why might you implement OIDC alongside SAML?

QUESTION 37
What is a practical reason to use Collections even in a single-Site deployment?

QUESTION 38
Which option is required to synchronize device posture attributes from a mobile MDM into ZTNA policies?

QUESTION 39
Why should you test Access Policies using non-production user groups first?

QUESTION 40
A Tenant Admin wants to verify that delegated admin scopes cannot edit global authentication.
Which test confirms this?

QUESTION 41
Which two conditions must be true for Zero Trust evaluation when a user accesses an internal web application agent-lessly?