Netskope NSK101 Online Practice Questions and Exam Preparation

Netskope NSK101 Online Questions & Answers

• Question 71:

  Which three statements are correct about Netskope's NewEdge Security Cloud Network Infrastructure? (Choose three.)

  A. It takes advantage of the public cloud by deploying security services on Google Cloud Platform.
  B. It includes direct peering with Microsoft and Google in every data center.
  C. It is a private security cloud network that is massively over provisioned, highly elastic, and built for scale.
  D. It delivers a single, unified network with no surcharges or reliance on public cloud infrastructure or virtual PoPs.
  E. It simplifies the administrator's job by limiting access to pre-defined availability zones.
  B. It includes direct peering with Microsoft and Google in every data center.
  C. It is a private security cloud network that is massively over provisioned, highly elastic, and built for scale.
  D. It delivers a single, unified network with no surcharges or reliance on public cloud infrastructure or virtual PoPs.

• Question 72:

  A customer changes CCI scoring from the default objective score to another score. In this scenario, what would be a valid reason for making this change?

  A. The customer has discovered a new SaaS application that is not yet rated in the CCI database.
  B. The customer's organization places a higher business risk weight on vendors that claim ownership of their data.
  C. The customer wants to punish an application vendor for providing poor customer service.
  D. The customer's organization uses a SaaS application that is currently listed as "under research".
  B. The customer's organization places a higher business risk weight on vendors that claim ownership of their data.

• Question 73:

  Which two technologies form a part of Netskope's Threat Protection module? (Choose two.)

  A. log parser
  B. DLP
  C. sandbox
  D. heuristics
  C. sandbox
  D. heuristics

• Question 74:

  In which scenario would you use a SAML reverse proxy?

  A. When the API-enabled protection exceeds the Cloud App API usage limits and cannot be used anymore.
  B. When the organization wants to perform inline inspection of cloud application traffic for roaming users that do not have the Netskope agent installed.
  C. When there are multiple SAML IdPs in use and the SAML reverse proxy can help federate them all together.
  D. When PAC files or explicit proxies can be used to steer traffic to the Netskope platform.
  C. When there are multiple SAML IdPs in use and the SAML reverse proxy can help federate them all together.

• Question 75:

  You have applied a DLP Profile to block all Personally Identifiable Information data uploads to Microsoft 365 OneDrive. DLP Alerts are not displayed and no OneDrive-related activities are displayed in the Skope IT App Events table. In this scenario, what are two possible reasons for this issue? (Choose two.)

  A. The Cloud Storage category is in the Steering Configuration as an exception.
  B. The destination domain is excluded from decryption in the decryption policy.
  C. A Netskope POP is not in your local country and therefore DLP policies cannot be applied.
  D. DLP policies do not apply when using IPsec as a steering option.
  A. The Cloud Storage category is in the Steering Configuration as an exception.
  B. The destination domain is excluded from decryption in the decryption policy.

• Question 76:

  When comparing data in motion with data at rest, which statement is correct?

  A. Data at rest requires API integration.
  B. Data in motion requires API integration.
  C. Data at rest cannot be scanned for malware until a user opens the file.
  D. Data in motion requires the Netskope client.
  D. Data in motion requires the Netskope client.

• Question 77:

  You want to use an out-of-band API connection into your sanctioned Microsoft 365 OneDrive for Business application to find sensitive content, enforce near real-time policy controls, and quarantine malware. In this scenario, which primary function in the Netskope platform would you use to connect your application to Netskope?

  A. DLP forensics
  B. Risk Insights
  C. laaS API-enabled Protection
  D. SaaS API-enabled Protection
  D. SaaS API-enabled Protection

• Question 78:

  All users are going through Netskope's Next Gen SWG. Your CISO requests a monthly report of all users who are accessing cloud applications with a "Low" or a "Poor" CCL, where the activity is either "Edit" or "Upload". Using the Advanced Analytics interface, which two statements describe which actions must be performed in this scenario? (Choose two.)

  A. Create a report using the Data Collection "Page Events", filtering on the activities "Edit" and "Upload" for cloud apps with CCL values of "Low" or "Poor".
  B. Schedule a report with a monthly recurrence to be sent by e-mail with the attached PDF document at the end of each month.
  C. Create a report using the Data Collection "Application Events" filtering on the activities "Edit" and "Upload" for cloud apps with CCL values of "Low" or "Poor".
  D. Schedule a report with a monthly recurrence to be sent by SMS with the attached PDF document at the end of each month.
  A. Create a report using the Data Collection "Page Events", filtering on the activities "Edit" and "Upload" for cloud apps with CCL values of "Low" or "Poor".
  B. Schedule a report with a monthly recurrence to be sent by e-mail with the attached PDF document at the end of each month.

• Question 79:

  You want to deploy Netskope's zero trust network access (ZTNA) solution, NPA. In this scenario, which action would you perform to accomplish this task?

  A. Create an OAuth identity access control between your users and your applications.
  B. Set up a reverse proxy using SAML and an identity provider.
  C. Enable Steer all Private Apps in your existing steering configuration(s) from the admin console.
  D. Configure SCIM to exchange identity information and attributes with your applications.
  C. Enable Steer all Private Apps in your existing steering configuration(s) from the admin console.

• Question 80:

  Which three components make up the Borderless SD-WAN solution? (Choose three) A. Endpoint SD-WAN Client

  B. SASE Orchestrator

  C. NPA Publisher

  D. SASE Gateway

  E. On-Premises Log Parser

  Correct Answer. ABD
  ABD