Netskope NSK101 Online Practice Questions and Exam Preparation

Netskope NSK101 Online Questions & Answers

• Question 31:

  You are deploying TLS support for real-time Web and SaaS transactions. What are two secure implementation methods in this scenario? (Choose two.)

  A. Bypass TLS 1.3 because it is not widely adopted.
  B. Downgrade to TLS 1.2 whenever possible.
  C. Support TLS 1.2 only when 1.3 is not supported by the server.
  D. Require TLS 1.3 for every server that accepts it.
  C. Support TLS 1.2 only when 1.3 is not supported by the server.
  D. Require TLS 1.3 for every server that accepts it.

• Question 32:

  What are two uses for deploying a Netskope Virtual Appliance? (Choose two.)

  A. as an endpoint for Netskope Private Access (NPA)
  B. as a local reverse-proxy to secure a SaaS application
  C. as a log parser to discover in-use cloud applications
  D. as a Secure Forwarder to steer traffic
  A. as an endpoint for Netskope Private Access (NPA)
  D. as a Secure Forwarder to steer traffic

• Question 33:

  An administrator wants to determine to which data plane a user is traversing. In this scenario, what are two ways to accomplish this task? (Choose two.)

  A. Settings -> Security Cloud Platform -> Devices
  B. Settings -> Security Cloud Platform -> Client Configuration
  C. SkopeIT -> Alerts -> View Details
  D. System Tray -> Configuration
  B. Settings -> Security Cloud Platform -> Client Configuration
  C. SkopeIT -> Alerts -> View Details

• Question 34:

  Which statement is correct about Netskope's Instance Awareness?

  A. It prevents users from browsing the Internet using outdated Microsoft Internet Explorer but allows them access if they use the latest version of Microsoft Edge.
  B. It identifies that a form hosted in Microsoft Forms belongs to the corporate Microsoft 365 tenant and not a tenant from a third party.
  C. It differentiates personal code from work-related code being uploaded to GitHub.
  D. It identifies if e-mails are being sent using Microsoft 365 through Outlook, Thunderbird, or the Web application in outlook.com.
  B. It identifies that a form hosted in Microsoft Forms belongs to the corporate Microsoft 365 tenant and not a tenant from a third party.

• Question 35:

  Which networking function does a SASE solution provide above and beyond an SSE solution?

  A. Secure Web Gateway
  B. Cloud Access Security Broker
  C. Data Loss Prevention
  D. Software Defined Wide Area Network
  D. Software Defined Wide Area Network

• Question 36:

  You are required to create a policy that will notify and allow users to log into their personal Google Drive instance. Which two policy components must be configured to enforce this use case? (Choose two.)

  A. Storage Constraint Profile
  B. Steering Exception
  C. User Alert
  D. User Constraint Profile
  B. Steering Exception
  C. User Alert

• Question 37:

  As an administrator, you need to configure the Netskope Admin UI to be accessible by specific IP addresses and to display a custom message after the admin users have been authenticated. Which two statements are correct in this scenario? (Choose two.)

  A. Add the specific IP addresses on the IP Allow List.
  B. Configure and enable the Privacy Notice to display the custom message.
  C. Add the specific IP addresses on the Network Location.
  D. Enable and set the User Notification Template to display the custom message.
  A. Add the specific IP addresses on the IP Allow List.
  D. Enable and set the User Notification Template to display the custom message.

• Question 38:

  Which two statements describe a website categorized as a domain generated algorithm (DGA)? (Choose two.)

  A. The website is used for domain registration.
  B. The domain contains malicious algorithms.
  C. The website is used to hide a command-and-control server.
  D. The domain was created by a program.
  C. The website is used to hide a command-and-control server.
  D. The domain was created by a program.

• Question 39:

  What are two primary advantages of Netskope's Secure Access Service Edge (SASE) architecture? (Choose two.

  A. no on-premises hardware required for policy enforcement
  B. Bayesian spam filtering
  C. Endpoint Detection and Response (EDR)
  D. single management console
  A. no on-premises hardware required for policy enforcement
  D. single management console

• Question 40:

  When accessing an encrypted website (HTTPS), what is a reason why you might receive a "certificate not trusted" browser message?

  A. A certificate authority is installed on the server.
  B. A self-signed certificate is installed on the server.
  C. A public certificate is installed on the server.
  D. There is no certificate installed on the server.
  B. A self-signed certificate is installed on the server.