ASSA80 logo
Focused certification exam prep
Start practice

ASSA80 Passing Score 2026: Exactly What You Need to Pass

TL;DR
  • The official passing score for exam 250-552 (ASSA80) is 70%, delivered in English only.
  • You get 65-75 questions in a 90-minute window, so pacing across ten domains matters as much as raw knowledge.
  • The exam costs USD 250 and is booked through CertMetrics and Pearson VUE, with test-center or OnVUE remote options.
  • Testing is closed book, so filtering syntax, packet capture logic, and Cyber Kill Chain terminology must be memorized, not looked up.

What "Passing Score" Actually Means for ASSA80

When people search for the ASSA80 passing score, they're really asking two different things: what number do I need, and how do I get comfortably above it. The number itself is simple. Broadcom's official exam listing for 250-552, Symantec Security Analytics 8.0 Technical Specialist, sets the passing score at 70%. There is no published scaled-scoring model, no domain-by-domain minimum, and no partial credit disclosed publicly - just a single overall threshold you need to clear across the exam as a whole.

That flat 70% threshold means every question theoretically carries equal weight toward your result, whether it comes from packet capture fundamentals or reporting workflows. It also means a weak showing in one domain can be offset by strong performance in another, which is exactly why understanding the full spread of content - covered in detail in the ASSA80 Exam Domains 2026 guide - matters more than obsessing over any single topic.

The Real Target Isn't 70%: Because you don't know which questions you missed, treat 70% as the floor, not the goal. Studying to comfortably clear 80-85% in practice gives you a buffer against nerves, ambiguous wording, and unfamiliar scenario questions on exam day.

Exam Format: Questions, Time, and Scoring Mechanics

The mechanics around the passing score matter just as much as the number itself. Exam 250-552 is delivered as a proctored, closed-book test with these official parameters:

  • 65-75 questions total, drawn from the ten domains in Broadcom's BTS study guide
  • 90-minute time limit
  • 70% passing score, English language delivery only
  • USD 250 exam fee
  • Delivered closed book - no notes, documentation, or reference material at the workstation

Do the math on pacing: at roughly 70-75 questions in 90 minutes, you have a little over a minute per question on average. That's workable if you know the material cold, but it leaves almost no time to reason through unfamiliar filtering syntax or work out packet-capture logic from first principles. This is one reason candidates researching how hard the ASSA80 exam actually is come away describing it as a knowledge-recall test under mild time pressure rather than a puzzle-solving exam.

Because the range is 65-75 rather than a fixed count, your effective percentage-per-question shifts slightly depending on your specific form. Practically, this changes nothing about strategy - you still need roughly seven out of every ten answers correct - but it's worth knowing so you don't panic if your question count differs slightly from a study partner's.

Key Takeaway

Budget your 90 minutes in two passes: answer everything you're confident on first, flag uncertain items, then return with remaining time. This protects your 70% target from clock-driven mistakes late in the session.

Domain-by-Domain: Where the Points Come From

The passing score is calculated across all content, so it helps to know exactly what that content is. Broadcom's BTS study guide organizes 250-552 into ten domains, and every question you'll see maps back to one of them.

Domain 1-3: Visibility, Architecture, and Network Design

These domains cover how Security Analytics captures traffic, its virtual and hardware appliance architecture, and - critically - the differences between network TAPs and SPAN ports for deployment.

  • Know when a TAP is required versus when a SPAN port is sufficient for capture
  • Understand core and appliance architecture distinctions
  • Be ready for scenario questions describing a network topology and asking for the correct capture point

Domain 4-6: Deployment, Filtering, and File Extraction

This cluster is the operational core of the exam: configuring deployment through the CLI and web interface, basic and advanced filtering with indicators, and the file extraction process along with its resulting artifacts.

  • Memorize filtering best practices - this is explicitly called out as its own objective, not a footnote
  • Understand what artifacts file extraction produces and why each one is useful during an investigation
  • Expect CLI-versus-web-interface distinction questions

Domain 7-10: Attack Analysis, Threat Hunting, Reporting, and Integrations

The back half of the exam shifts from mechanics to analyst workflow: the anatomy of a cyber-attack, the Cyber Kill Chain, Indicators of Compromise, threat hunting and incident response procedures, report creation and distribution, and integrations with Symantec and third-party products.

  • Be able to place attack stages in Cyber Kill Chain order
  • Know what qualifies as an IoC versus general anomalous traffic
  • Understand how reports get built, scheduled, and shared, and which integrations extend Security Analytics data

For a full breakdown of every objective under each domain, the ASSA80 Exam Domains 2026 guide walks through all ten in sequence, and the ASSA80 Study Guide pairs each domain with recommended prep resources.

Question Styles You'll See on 250-552

Broadcom's official sample materials for 250-552 include two formats: single-answer multiple choice and multiple-response questions where more than one option must be selected to get credit. This distinction matters for the passing score because a multiple-response question typically requires you to identify every correct option - partial selection generally doesn't earn partial credit.

Practically, this means two things for your prep:

  • When practicing, don't stop at the first plausible answer on a question that could have multiple correct responses - read the full option list every time.
  • Scenario-style wording (a described network, a described investigation, a described alert) is common across the domains, especially around TAP-vs-SPAN placement, filtering logic, and Cyber Kill Chain sequencing.
Training Version vs. Exam Title: Broadcom currently recommends Security Analytics 8.2.5 Administration training to prepare for this exam, even though the credential itself remains titled "8.0" and the study guide references 8.0.x documentation. Match your practice scenarios to the ten official objectives rather than assuming the training version number changes what's tested.

Registration, Fees, and Delivery Options

The passing score exists inside a specific registration and delivery process, and getting that mechanics right avoids day-of surprises. Exam 250-552 is scheduled through CertMetrics and delivered via Pearson VUE, with two delivery paths: an in-person test center or OnVUE remote proctoring from your own location.

Beyond the USD 250 fee and 70% passing score, candidates must also formally accept the Broadcom Software Certification Agreement as part of sitting the exam - this is a separate requirement from the score itself, and skipping it isn't an option if you want your result to count.

Broadcom's exam page recommends roughly three months of regular production or lab experience with Security Analytics, plus intermediate networking and security knowledge, while the BTS study guide broadens that to 3-6 months. Neither is a hard prerequisite enforced at registration, but both signal how much hands-on exposure the question difficulty assumes. If you're weighing whether you meet that bar, the ASSA80 Requirements guide breaks down what "intermediate" experience looks like in practice, and the ASSA80 Certification Cost breakdown covers the fee alongside any retake considerations.

Exam DetailOfficial Specification
Passing score70%
Question count65-75
Time limit90 minutes
FeeUSD 250
Delivery languageEnglish
Book policyClosed book
Delivery methodTest center or OnVUE remote proctoring
Certification validity2 years

Building a Study Margin Above 70%

Since 70% is a hard cutoff with no visibility into which specific questions you missed, the safest strategy is building margin rather than aiming for the minimum. Practically, that means running full-length practice sessions under the real 90-minute constraint and treating anything below roughly 80% correct as a signal to revisit that domain, not just that question.

Two domains deserve extra margin because they blend conceptual knowledge with scenario reasoning rather than pure recall: the TAP-versus-SPAN network architecture objective (Domain 3) and the filtering best-practices objective (Domain 5). Both show up as scenario questions where a described network or a described dataset requires you to pick the correct configuration, which takes longer to reason through than a straight definitional question.

You can build and time these drills yourself, or run structured sets on a dedicated ASSA80 practice test platform that mirrors the 65-75 question, 90-minute structure so your pacing habits transfer directly to exam day.

Key Takeaway

Track your practice-session score trend over time, not just a single result. Consistent scores in the 80-85% range across multiple full-length attempts are a far better predictor of clearing 70% under real exam conditions than one lucky high score.

A Focused Prep Timeline Tied to the Passing Score

Generic study techniques only help if they're mapped to what 250-552 actually tests. Here's a domain-anchored timeline that spends more time where the exam's scenario questions concentrate.

Week 1

Visibility and Architecture (Domains 1-3)

  • Study packet capture fundamentals and appliance architecture
  • Drill TAP-vs-SPAN placement scenarios until identification is automatic
Week 2

Deployment and Filtering (Domains 4-5)

  • Practice CLI and web interface configuration options side by side
  • Build a personal reference of filtering best practices, then test yourself closed book
Week 3

File Extraction, Attacks, and Threat Hunting (Domains 6-8)

  • Map file extraction artifacts to the investigation purpose each one serves
  • Memorize Cyber Kill Chain stages and IoC identification criteria
Week 4

Reporting, Integrations, and Full Simulation (Domains 9-10 + review)

  • Review report creation, scheduling, and distribution workflows
  • Study Symantec and third-party integration points
  • Run at least two full 90-minute, 65-75 question practice exams under timed conditions

If you'd rather see the full topic-by-topic checklist condensed into a single reference before exam day, the ASSA80 Cheat Sheet summarizes the must-know facts across all ten domains, and the practice test hub lets you validate readiness against exam-style questions rather than flashcards alone.

After You Pass: Validity and Recertification

Clearing 70% earns you a Broadcom Technical Specialist credential valid for two years. Recertification happens by passing an available Broadcom Software exam version when your certification approaches expiration - there's no separate renewal fee structure published beyond sitting a current exam again.

It's also worth separating two dates that get confused: Security Analytics maintenance and technical support are scheduled to end on November 1, 2030. That's a product-support lifecycle milestone from Broadcom's support notices, not an announced retirement date for the 250-552 exam itself. Don't let one get mistaken for the other when planning long-term career value - a topic covered more broadly in whether the ASSA80 certification is worth it and in the ASSA80 Salary Guide for readers weighing the credential against job market demand.

FAQ

What is the exact passing score for ASSA80 (exam 250-552)?

The official passing score is 70%, based on Broadcom's exam listing for 250-552, Symantec Security Analytics 8.0 Technical Specialist.

How many questions do I need to get right to pass?

The exam has 65-75 questions, and you need roughly 70% of them correct. The exact number varies slightly depending on your specific question count, but treat "about seven out of ten" as your working target.

Is there a separate minimum score per domain?

No domain-level minimum is published. The 70% passing score applies to overall exam performance across all ten domains combined, not to each domain individually.

Can I retake the exam if I don't clear 70%?

Retake policies and any associated costs are handled through the same CertMetrics and Pearson VUE registration process used for initial scheduling; check current retake terms at registration since fee details can be confirmed directly through those official channels.

Does passing require anything besides the 70% score?

Yes. Beyond scoring at least 70%, candidates must accept the Broadcom Software Certification Agreement as part of completing the proctored exam process.

Ready to pass your ASSA80 exam?

Put this into practice with free ASSA80 questions across every exam domain.