Netskope NSK101 Online Practice Questions and Exam Preparation

Netskope NSK101 Online Questions & Answers

• Question 121:

  When designing an architecture with Netskope Private Access, which element guarantees connectivity between the Netskope cloud and the private application?

  A. Netskope Publisher
  B. API connector
  C. Third-party router with GRE/IPsec support
  D. Netskope Client
  A. Netskope Publisher

• Question 122:

  You added a new private app definition and created a Real-time Protection policy to allow access for all users. You have a user who reports that they are unable to access the application but all other applications work fine. Which statement correctly describes how to troubleshoot this issue using the Netskope Web UI?

  A. You can verity the user's policy, steering configuration, client status and other relevant details using the Advanced Debugging tools in the Netskoge Client.
  B. You can verify the user's policy, steering configuration, client status and other relevant details using the Agg Discovery dashboard.
  C. You can verify the user's policy, steering configuration, client status and other relevant details using DEM.
  D. You can verify the user's policy, steering configuration, client status and other relevant details using the NPA Troubleshooter took
  D. You can verify the user's policy, steering configuration, client status and other relevant details using the NPA Troubleshooter took

• Question 123:

  What are two supported ways to provision users to your customer's Netskope tenant? (Choose two.)

  A. Use Microsoft Intune.
  B. Use the AD Connector.
  C. Use SCIM.
  D. Use the Directory Importer.
  B. Use the AD Connector.
  C. Use SCIM.

• Question 124:

  Click the Exhibit button.

  

  Referring to the exhibit, what are two recommended steps to be set on the perimeter device to monitor IPsec tunnels to a Netskope data plane? (Choose two.)

  A. Enable IKE Dead Peer Detection (DPD) for each tunnel.
  B. Send ICMP requests to the Netskope location's Probe IP
  C. Send HTTP requests to the Netskope location's Probe IP.
  D. Send ICMP requests to the Netskope location's proxy IPs.
  A. Enable IKE Dead Peer Detection (DPD) for each tunnel.
  B. Send ICMP requests to the Netskope location's Probe IP

• Question 125:

  How do you provision users to your customer's Netskope tenant? (Choose two.)

  A. Use Microsoft Intune.
  B. Use the AD Connector.
  C. Use SCIM.
  D. Use the Directory Importer.
  B. Use the AD Connector.
  D. Use the Directory Importer.

• Question 126:

  There is a DLP violation on a file in your sanctioned Google Drive instance. The file is in a deleted state. You need to locate information pertaining to this DLP violation using Netskope. In this scenario, which statement is correct?

  A. You can find DLP violations under Forensic profiles.
  B. DLP incidents for a file are not visible when the file is deleted.
  C. You can find DLP violations under the Incidents dashboard.
  D. You must create a forensic profile so that an incident is created.
  C. You can find DLP violations under the Incidents dashboard.

• Question 127:

  Click the Exhibit button.

  

  Referring to the exhibit, you have a user reporting that a blocked website is needed for legitimate business reasons. Upon review, you determine that the user has been blocked by the Global Block policy. You need to create an exception forthat domain. You create a custom URL list that includes the domain.

  In this scenario, which two actions would allow this access? (Choose two.)

  A. Create a custom category with the custom URL list as an included URL list and add it to an allow policy below the triggered Global Block policy.
  B. Create a custom category with the custom URL list as an included URL list and add it to an allow policy above the triggered Global Block policy.
  C. Add the custom URL list as an excluded URL list to the category in the Global Allow policy.
  D. Add the custom URL list as an excluded URL list to the category in the Global Block policy.
  B. Create a custom category with the custom URL list as an included URL list and add it to an allow policy above the triggered Global Block policy.
  C. Add the custom URL list as an excluded URL list to the category in the Global Allow policy.

• Question 128:

  Your customer has cloud storage repositories containing sensitive files of their partners, including bank statements, consulting, and disclosure agreements. In this scenario, which feature would help them control the flow of these types of documents?

  A. ZTNA
  B. Netskope Advanced Analytics
  C. DLP document classifiers
  D. Sandboxing
  C. DLP document classifiers

• Question 129:

  A Netskope administrator wants to create a policy to quarantine files based on sensitive content.

  In this scenario, which variable must be included in the policy to achieve this goal?

  A. Organizational Unit
  B. Cloud Confidence Index level
  C. DLP Profile
  D. Threat Protection Profile
  C. DLP Profile