最新なBroadcom 250-604問題集（173題）、真実試験の問題を全部にカバー！

質問 1：
What benefit does SES Complete's mobile application security provide when deployed in a bring-your-own-device (BYOD) enterprise model?
A. It disables Bluetooth and NFC by default
B. It encrypts all data including personal app data on the mobile device
C. It helps identify and block apps with malicious behavior while preserving user privacy
D. It offers per-app VPN settings for non-enterprise apps
正解：C

質問 2：
Scenario:
A tech startup with 200 employees is rapidly scaling its workforce, many of whom are remote. The company is deploying SES Complete but has limited time for hands-on IT support and limited internal infrastructure.
What strategies help maximize SES Complete's benefits for a fast-scaling startup with limited IT operations? (Choose three)
A. Implement weekly agent audits by IT staff
B. Set up local policy servers in each location
C. Use ICDm for real-time monitoring and control
D. Deploy agents with pre-configured policies via GPO or automated scripts
E. Rely on cloud-native auto-update features for threat intelligence
正解：C,D,E

質問 3：
Scenario:
An endpoint in your environment has triggered a high-severity EDR alert. The analyst identifies an unknown executable running on the system, and the behavior suggests lateral movement attempts.
Which immediate action in ICDm should the analyst perform?
A. Archive the alert and generate a compliance report
B. Quarantine the endpoint to halt potential spread
C. Deactivate the endpoint's firewall
D. Submit the executable to the sandbox for future inspection
正解：B

質問 4：
Scenario:
Your organization operates field devices using mobile hotspots. Employees often connect through untrusted Wi-Fi networks. You are asked to minimize the risk of data exfiltration via these connections using SES Complete.
Which two actions should be taken using SES Complete mobile security capabilities? (Choose two)
A. Disable App Control in monitor mode
B. Block all app installations on field devices
C. Enforce real-time scanning of mobile app behavior
D. Configure Network Integrity to detect rogue networks
正解：C,D

質問 5：
What benefit does deploying Threat Defense for Active Directory offer in hybrid environments with both on-premises and cloud identity providers?
A. It supports identity federation between AD and cloud services like Azure AD.
B. It disables all cloud sync operations while protecting AD.
C. It ensures consistent threat visibility across both on-prem and cloud AD infrastructures.
D. It allows AD policies to be overridden by cloud-native endpoint policies.
正解：C

質問 6：
Which update method ensures that endpoints are protected even during periods of disconnection from ICDm?
A. On-Demand Update
B. Real-time Sync
C. Scheduled Reboot
D. Local Content Distribution
正解：D

質問 7：
What methods can administrators use to enroll endpoints into SES Complete? (Choose two)
A. Via ICDm using agent installation packages
B. Using domain-based deployment with Microsoft GPO
C. By importing certificates from third-party tools
D. Through SEP Mobile device scans
正解：A,B

質問 8：
Scenario:
An organization is deploying SES Complete to multiple branch offices globally. Some branches have low IT staff presence and no on-premise infrastructure. The security team wants to ensure continuous protection, visibility, and minimal configuration effort.
What should a security analyst consider when enrolling remote endpoints into SES Complete from different geographies with limited infrastructure support? (Choose three)
A. Enable automatic policy updates via cloud communication
B. Utilize agent packages with auto-enrollment capabilities
C. Schedule weekly offline syncs for policy enforcement
D. Use SEP Mobile agents for remote deployment
E. Leverage ICDm for centralized policy deployment
正解：A,B,E

質問 9：
What is the primary function of Network Integrity Policy Configuration in ICDm?
A. Disabling Bluetooth pairing
B. Restricting device roaming
C. Controlling CPU usage on mobile devices
D. Defining detection and mitigation rules for mobile network threats
正解：D