Netskope NSK101 Online Practice Questions and Exam Preparation

Netskope NSK101 Online Questions & Answers

• Question 41:

  You are setting up a real-time threat protection policy for patient zero to block previously unseen files until a benign verdict is produced by the Netskope Threat Protection Service. In this scenario, which two policy parameters must you configure? (Choose two)

  A. block action
  B. CCL destination criterion
  C. file type activity constraint
  D. remediation profile
  A. block action
  D. remediation profile

• Question 42:

  Exhibit

  

  A user is connected to a cloud application through Netskope's proxy.

  In this scenario, what information is available at Skope IT? (Choose three.)

  A. username. device location
  B. destination IP. OS patch version
  C. account instance, URL category
  D. user activity, cloud app risk rating
  E. file version, shared folder
  A. username. device location
  C. account instance, URL category
  D. user activity, cloud app risk rating

• Question 43:

  Which Netskope component would an administrator use to see an overview of private application usage and performance?

  A. Digital Experience Management
  B. Publishers page
  C. Incident Management
  D. Cloud Exchange
  A. Digital Experience Management

• Question 44:

  The Netskope deployment for your organization is deployed in CASB-only mode. You want to view dropbox.com traffic but do not see it when using SkopeIT. In this scenario, what are two reasons for this problem? (Choose two.)

  A. The Dropbox Web application is certificate pinned and cannot be steered to the Netskope tenant.
  B. The Dropbox domains have not been configured to steer to the Netskope tenant.
  C. The Dropbox desktop application is certificate pinned and cannot be steered to the Netskope tenant.
  D. The Dropbox domains are configured to steer to the Netskope tenant.
  A. The Dropbox Web application is certificate pinned and cannot be steered to the Netskope tenant.
  B. The Dropbox domains have not been configured to steer to the Netskope tenant.

• Question 45:

  You are creating a real-time policy for cloud applications.

  In addition to users, groups, and organizational units, which two source criteria would support this scenario? (Choose two.)

  A. protocol version
  B. access method
  C. browser version
  D. device classification
  B. access method
  D. device classification

• Question 46:

  What is a benefit that Netskope instance awareness provides?

  A. It prevents movement of corporate sensitive data to a personal Dropbox account.
  B. It prevents the user from copying information from a corporate email and pasting the information into a GitHub repository.
  C. It differentiates between an IT managed Google Drive instance versus a personal Dropbox account.
  D. It differentiates between an IT managed Google Drive instance versus a personal Google Drive instance.
  D. It differentiates between an IT managed Google Drive instance versus a personal Google Drive instance.

• Question 47:

  How does a cloud security solution achieve visibility into TLS/SSL-protected Web traffic?

  A. by altering the TLS handshake and forcing the website to use a weak encryption algorithm which can be brute-forced
  B. by altering the TLS handshake and forcing the website to use insecure (HTTP) access
  C. by performing the TLS handshake on behalf of the website and replacing the site's certificate with its own
  D. by using government-issued universal decryption keys for the ciphers
  C. by performing the TLS handshake on behalf of the website and replacing the site's certificate with its own

• Question 48:

  When using an out-of-band API connection with your sanctioned cloud service, what are two capabilities available to the administrator? (Choose two.)

  A. to quarantine malware
  B. to find sensitive content
  C. to block uploads
  D. to allow real-time access
  A. to quarantine malware
  B. to find sensitive content

• Question 49:

  Click the Exhibit button.

  

  A user is connected to a SaaS application through Netskope's Next Gen SWG with SSL inspection enabled. In this scenario, what information is available in SkopeIT? (Choose three.)

  A. User activity, CCL
  B. Destination IP, OS patch version
  C. Account instance, category
  D. Username, source location
  E. File version, shared folder
  A. User activity, CCL
  C. Account instance, category
  D. Username, source location

• Question 50:

  You determine that a business application uses non-standard HTTPS ports. You want to steer all HTTPS traffic for this application and have visibility and control over user activities. Which action will allow you to accomplish this task?

  A. Create a steering exception for the application's domain and ports.
  B. Define a Private Agg for the application's domain and ports.
  C. Configure Non-standard ports in the Steering Configuration.
  D. Select All Traffic in the Steering Configuration.
  C. Configure Non-standard ports in the Steering Configuration.