- What "Passing Score" Actually Means for ASSA80
- Exam Format: Questions, Time, and Scoring Mechanics
- Domain-by-Domain: Where the Points Come From
- Question Styles You'll See on 250-552
- Registration, Fees, and Delivery Options
- Building a Study Margin Above 70%
- A Focused Prep Timeline Tied to the Passing Score
- After You Pass: Validity and Recertification
- FAQ
- The official passing score for exam 250-552 (ASSA80) is 70%, delivered in English only.
- You get 65-75 questions in a 90-minute window, so pacing across ten domains matters as much as raw knowledge.
- The exam costs USD 250 and is booked through CertMetrics and Pearson VUE, with test-center or OnVUE remote options.
- Testing is closed book, so filtering syntax, packet capture logic, and Cyber Kill Chain terminology must be memorized, not looked up.
What "Passing Score" Actually Means for ASSA80
When people search for the ASSA80 passing score, they're really asking two different things: what number do I need, and how do I get comfortably above it. The number itself is simple. Broadcom's official exam listing for 250-552, Symantec Security Analytics 8.0 Technical Specialist, sets the passing score at 70%. There is no published scaled-scoring model, no domain-by-domain minimum, and no partial credit disclosed publicly - just a single overall threshold you need to clear across the exam as a whole.
That flat 70% threshold means every question theoretically carries equal weight toward your result, whether it comes from packet capture fundamentals or reporting workflows. It also means a weak showing in one domain can be offset by strong performance in another, which is exactly why understanding the full spread of content - covered in detail in the ASSA80 Exam Domains 2026 guide - matters more than obsessing over any single topic.
Exam Format: Questions, Time, and Scoring Mechanics
The mechanics around the passing score matter just as much as the number itself. Exam 250-552 is delivered as a proctored, closed-book test with these official parameters:
- 65-75 questions total, drawn from the ten domains in Broadcom's BTS study guide
- 90-minute time limit
- 70% passing score, English language delivery only
- USD 250 exam fee
- Delivered closed book - no notes, documentation, or reference material at the workstation
Do the math on pacing: at roughly 70-75 questions in 90 minutes, you have a little over a minute per question on average. That's workable if you know the material cold, but it leaves almost no time to reason through unfamiliar filtering syntax or work out packet-capture logic from first principles. This is one reason candidates researching how hard the ASSA80 exam actually is come away describing it as a knowledge-recall test under mild time pressure rather than a puzzle-solving exam.
Because the range is 65-75 rather than a fixed count, your effective percentage-per-question shifts slightly depending on your specific form. Practically, this changes nothing about strategy - you still need roughly seven out of every ten answers correct - but it's worth knowing so you don't panic if your question count differs slightly from a study partner's.
Key Takeaway
Budget your 90 minutes in two passes: answer everything you're confident on first, flag uncertain items, then return with remaining time. This protects your 70% target from clock-driven mistakes late in the session.
Domain-by-Domain: Where the Points Come From
The passing score is calculated across all content, so it helps to know exactly what that content is. Broadcom's BTS study guide organizes 250-552 into ten domains, and every question you'll see maps back to one of them.
Domain 1-3: Visibility, Architecture, and Network Design
These domains cover how Security Analytics captures traffic, its virtual and hardware appliance architecture, and - critically - the differences between network TAPs and SPAN ports for deployment.
- Know when a TAP is required versus when a SPAN port is sufficient for capture
- Understand core and appliance architecture distinctions
- Be ready for scenario questions describing a network topology and asking for the correct capture point
Domain 4-6: Deployment, Filtering, and File Extraction
This cluster is the operational core of the exam: configuring deployment through the CLI and web interface, basic and advanced filtering with indicators, and the file extraction process along with its resulting artifacts.
- Memorize filtering best practices - this is explicitly called out as its own objective, not a footnote
- Understand what artifacts file extraction produces and why each one is useful during an investigation
- Expect CLI-versus-web-interface distinction questions
Domain 7-10: Attack Analysis, Threat Hunting, Reporting, and Integrations
The back half of the exam shifts from mechanics to analyst workflow: the anatomy of a cyber-attack, the Cyber Kill Chain, Indicators of Compromise, threat hunting and incident response procedures, report creation and distribution, and integrations with Symantec and third-party products.
- Be able to place attack stages in Cyber Kill Chain order
- Know what qualifies as an IoC versus general anomalous traffic
- Understand how reports get built, scheduled, and shared, and which integrations extend Security Analytics data
For a full breakdown of every objective under each domain, the ASSA80 Exam Domains 2026 guide walks through all ten in sequence, and the ASSA80 Study Guide pairs each domain with recommended prep resources.
Question Styles You'll See on 250-552
Broadcom's official sample materials for 250-552 include two formats: single-answer multiple choice and multiple-response questions where more than one option must be selected to get credit. This distinction matters for the passing score because a multiple-response question typically requires you to identify every correct option - partial selection generally doesn't earn partial credit.
Practically, this means two things for your prep:
- When practicing, don't stop at the first plausible answer on a question that could have multiple correct responses - read the full option list every time.
- Scenario-style wording (a described network, a described investigation, a described alert) is common across the domains, especially around TAP-vs-SPAN placement, filtering logic, and Cyber Kill Chain sequencing.
Registration, Fees, and Delivery Options
The passing score exists inside a specific registration and delivery process, and getting that mechanics right avoids day-of surprises. Exam 250-552 is scheduled through CertMetrics and delivered via Pearson VUE, with two delivery paths: an in-person test center or OnVUE remote proctoring from your own location.
Beyond the USD 250 fee and 70% passing score, candidates must also formally accept the Broadcom Software Certification Agreement as part of sitting the exam - this is a separate requirement from the score itself, and skipping it isn't an option if you want your result to count.
Broadcom's exam page recommends roughly three months of regular production or lab experience with Security Analytics, plus intermediate networking and security knowledge, while the BTS study guide broadens that to 3-6 months. Neither is a hard prerequisite enforced at registration, but both signal how much hands-on exposure the question difficulty assumes. If you're weighing whether you meet that bar, the ASSA80 Requirements guide breaks down what "intermediate" experience looks like in practice, and the ASSA80 Certification Cost breakdown covers the fee alongside any retake considerations.
| Exam Detail | Official Specification |
|---|---|
| Passing score | 70% |
| Question count | 65-75 |
| Time limit | 90 minutes |
| Fee | USD 250 |
| Delivery language | English |
| Book policy | Closed book |
| Delivery method | Test center or OnVUE remote proctoring |
| Certification validity | 2 years |
Building a Study Margin Above 70%
Since 70% is a hard cutoff with no visibility into which specific questions you missed, the safest strategy is building margin rather than aiming for the minimum. Practically, that means running full-length practice sessions under the real 90-minute constraint and treating anything below roughly 80% correct as a signal to revisit that domain, not just that question.
Two domains deserve extra margin because they blend conceptual knowledge with scenario reasoning rather than pure recall: the TAP-versus-SPAN network architecture objective (Domain 3) and the filtering best-practices objective (Domain 5). Both show up as scenario questions where a described network or a described dataset requires you to pick the correct configuration, which takes longer to reason through than a straight definitional question.
You can build and time these drills yourself, or run structured sets on a dedicated ASSA80 practice test platform that mirrors the 65-75 question, 90-minute structure so your pacing habits transfer directly to exam day.
Key Takeaway
Track your practice-session score trend over time, not just a single result. Consistent scores in the 80-85% range across multiple full-length attempts are a far better predictor of clearing 70% under real exam conditions than one lucky high score.
A Focused Prep Timeline Tied to the Passing Score
Generic study techniques only help if they're mapped to what 250-552 actually tests. Here's a domain-anchored timeline that spends more time where the exam's scenario questions concentrate.
Visibility and Architecture (Domains 1-3)
- Study packet capture fundamentals and appliance architecture
- Drill TAP-vs-SPAN placement scenarios until identification is automatic
Deployment and Filtering (Domains 4-5)
- Practice CLI and web interface configuration options side by side
- Build a personal reference of filtering best practices, then test yourself closed book
File Extraction, Attacks, and Threat Hunting (Domains 6-8)
- Map file extraction artifacts to the investigation purpose each one serves
- Memorize Cyber Kill Chain stages and IoC identification criteria
Reporting, Integrations, and Full Simulation (Domains 9-10 + review)
- Review report creation, scheduling, and distribution workflows
- Study Symantec and third-party integration points
- Run at least two full 90-minute, 65-75 question practice exams under timed conditions
If you'd rather see the full topic-by-topic checklist condensed into a single reference before exam day, the ASSA80 Cheat Sheet summarizes the must-know facts across all ten domains, and the practice test hub lets you validate readiness against exam-style questions rather than flashcards alone.
After You Pass: Validity and Recertification
Clearing 70% earns you a Broadcom Technical Specialist credential valid for two years. Recertification happens by passing an available Broadcom Software exam version when your certification approaches expiration - there's no separate renewal fee structure published beyond sitting a current exam again.
It's also worth separating two dates that get confused: Security Analytics maintenance and technical support are scheduled to end on November 1, 2030. That's a product-support lifecycle milestone from Broadcom's support notices, not an announced retirement date for the 250-552 exam itself. Don't let one get mistaken for the other when planning long-term career value - a topic covered more broadly in whether the ASSA80 certification is worth it and in the ASSA80 Salary Guide for readers weighing the credential against job market demand.
FAQ
The official passing score is 70%, based on Broadcom's exam listing for 250-552, Symantec Security Analytics 8.0 Technical Specialist.
The exam has 65-75 questions, and you need roughly 70% of them correct. The exact number varies slightly depending on your specific question count, but treat "about seven out of ten" as your working target.
No domain-level minimum is published. The 70% passing score applies to overall exam performance across all ten domains combined, not to each domain individually.
Retake policies and any associated costs are handled through the same CertMetrics and Pearson VUE registration process used for initial scheduling; check current retake terms at registration since fee details can be confirmed directly through those official channels.
Yes. Beyond scoring at least 70%, candidates must accept the Broadcom Software Certification Agreement as part of completing the proctored exam process.