Netskope NSK101 Online Practice Questions and Exam Preparation

Netskope NSK101 Online Questions & Answers

• Question 51:

  Which three security controls are offered by the Netskope Cloud platform? (Choose three.)

  A. identity lifecycle management
  B. data loss prevention for SMTP
  C. cloud security posture management
  D. endpoint anti-malware
  E. threat protection
  B. data loss prevention for SMTP
  C. cloud security posture management
  E. threat protection

• Question 52:

  Click the Exhibit button.

  

  The exhibit shows security rules that are part of which component of the Netskope platform?

  A. Real-time Protection
  B. Advanced Malware Protection
  C. Security Posture
  D. Behavior Analytics
  D. Behavior Analytics

• Question 53:

  When would an administrator need to use a tombstone file?

  A. You use a tombstone file when a policy causes a file download to be blocked.
  B. You use a tombstone file when a policy causes a publicly shared file to be encrypted.
  C. You use a tombstone file when the policy causes a file to be moved to quarantine.
  D. You use a tombstone file when a policy causes a file to be moved to legal hold.
  C. You use a tombstone file when the policy causes a file to be moved to quarantine.

• Question 54:

  You want to determine which NewEdge data planes that your remote users have been recently using. Which area of the Netskope Tenant UI would provide this information?

  A. Client Steering under Digital Experience Management
  B. Network Steering under Digital Experience Management
  C. Users page under Settings
  D. Devices page under Settings
  A. Client Steering under Digital Experience Management

• Question 55:

  You need to provide a quick view under the Skope IT Applications page showing only risky shadow IT cloud applications being used. In this scenario, which two filter combinations would you use to accomplish this task? (Choose two.)

  A. Sanctioned = No
  B. CCL = High. Under Research
  C. User Device Type = Windows Device
  D. CCL = Medium. Low, Poor
  A. Sanctioned = No
  D. CCL = Medium. Low, Poor

• Question 56:

  Your organization has recently implemented Netskope Private Access. During an investigation, your security team has asked you to provide a list of all hosts including domains and IP addresses that a user accessed through Netskope Private Access for the past seven days.

  Which two locations in the Netskope Web UI would allow you to obtain and export the requested data? (Choose two.)

  A. Private Apps page in SkopeIT
  B. Users page in SkopeIT
  C. Network Events page in SkopeIT
  D. Transaction Events collection in Advanced Analytics
  A. Private Apps page in SkopeIT
  C. Network Events page in SkopeIT

• Question 57:

  Click the Exhibit button.

  

  A user has the Netskope Client enabled with the correct steering configuration applied. The exhibit shows an inline policy that has a predefined webmail category blocked. However the user is still able to access Yahoo mail. Which statement is correct in this scenario?

  A. The user is not part of the correct AD group or OU.
  B. The user is not steered using an explicit proxy.
  C. The webmail category does not include Yahoo mail when using an explicit proxy
  D. The user's AD group must be added to the policy.
  C. The webmail category does not include Yahoo mail when using an explicit proxy

• Question 58:

  Your company has implemented Netskope's Cloud Firewall and requires that all FTP connections are blocked regardless of the ports being used. Which two statements correctly identify how to block FTP access? (Choose two.)

  A. Create a Real-time Protection policy with FTP as the destination application and Block as the action.
  B. Create a Real-time Protection policy with a custom Firewall App Definition for TCP port 21 as the destination application and Block as the action.
  C. Ensure there are no Real-time Protection polices that allow FTP and change the default non-Web action to Block.
  D. Create a custom Firewall App Definition for TCP port 21 and add it to the default tenant Steering Configuration as an exception.
  A. Create a Real-time Protection policy with FTP as the destination application and Block as the action.
  B. Create a Real-time Protection policy with a custom Firewall App Definition for TCP port 21 as the destination application and Block as the action.

• Question 59:

  Which two cloud security and infrastructure enablement technologies does Secure Access Service Edge (SASE) combine into its unified platform? (Choose two.)

  A. Distributed Denial of Service Protection (DDoS)
  B. Zero Trust Network Access (ZTNA)
  C. Cloud Access Security Broker (CASB)
  D. Unified Threat Management (UTM)
  B. Zero Trust Network Access (ZTNA)
  C. Cloud Access Security Broker (CASB)

• Question 60:

  Which two traffic steering configurations are supported by Netskope? (Choose two.)

  A. browser isolation traffic only
  B. cloud applications only
  C. all Web traffic including cloud applications
  D. Web traffic only
  B. cloud applications only
  C. all Web traffic including cloud applications