Netskope NSK200 Online Practice Questions and Exam Preparation

Netskope NSK200 Online Questions & Answers

• Question 11:

  Review the exhibit.

  

  You want to create a custom URL category to apply a secure Web gateway policy combining your own list of URLs and Netskope predefined categories. In this scenario, which task must be completed?

  A. Add the URL list to the Client configuration.
  B. Add the URL list to a Custom category.
  C. Add the URL list to a Steering configuration.
  D. Add the URL list to a Real-time Protection policy.
  B. Add the URL list to a Custom category.

• Question 12:

  Your IT organization is migrating its user directory services from Microsoft Active Directory to a cloud-based Identity Provider (IdP) solution, Azure AD. You are asked to adapt the Netskope user provisioning process to work with this new cloud-based IdP.

  A. Directory Importer
  B. Microsoft GPO
  C. SCIMApp
  D. Manual Import
  C. SCIMApp

• Question 13:

  You are given an MD5 hash of a file suspected to be malware by your security incident response team. They ask you to offer insight into who has encountered this file and from where was the threat initiated. In which two Skope IT events tables would you search to find the answers to these questions? (Choose two.)

  A. Application Events
  B. Network Events
  C. Alerts
  D. Page Events
  A. Application Events
  C. Alerts

• Question 14:

  Review the exhibit.

  

  A security analyst needs to create a report to view the top five categories of unsanctioned applications accessed in the last 90 days. Referring to the exhibit, what are two data collections in Advanced Analytics that would be used to create this report? (Choose two.)

  A. Alerts
  B. Application Events
  C. Page Events
  D. Network Events
  B. Application Events
  D. Network Events

• Question 15:

  Your organization has three main locations with 30.000 hosts in each location. You are planning to deploy Netskope using iPsec tunnels for security. What are two considerations to make a successful connection in this scenario? (Choose two.)

  A. browsers in use
  B. operating systems
  C. redundant POPs
  D. number of hosts
  C. redundant POPs
  D. number of hosts

• Question 16:

  While most Web and SaaS traffic is decrypted for inspection, you are asked to prevent a certain host on the network from SSL decryption for privacy purposes.

  A. Create a steering exception for the host.
  B. Create a Real-time Protection policy, select the host, and choose to block SSL decryption.
  C. Create a Source Network Location for a Do Not Decrypt SSL policy.
  D. Add the host to the certificate-pinned application list.
  A. Create a steering exception for the host.

• Question 17:

  You are deploying a Netskope client in your corporate office network. You are aware of firewall or proxy rules that need to be modified to allow traffic. Which two statements are true in this scenario? (Choose two.)

  A. You need to allow TLS 1.1 traffic to pass through the firewalls from the users' IP to all destinations.
  B. You must enable SSL decryption in the proxy to inspect the Netskope tunnel.
  C. It is recommended to allow UDP port 443 to the Netskope IP ranges to allow DTLS.
  D. You need to allow TCP port 443 to the Netskope IP ranges or domains.
  C. It is recommended to allow UDP port 443 to the Netskope IP ranges to allow DTLS.
  D. You need to allow TCP port 443 to the Netskope IP ranges or domains.

• Question 18:

  After deploying the Netskope client to a number of devices, users report that the Client status indicates "Admin Disabled". User and gateway information is displayed correctly in the client configuration dialog Why are clients installing in an "Admin Disabled" state in this scenario?

  A. All devices were previously disabled by the administrator.
  B. The user's identity is not synchronized to Netskope.
  C. The user's password was incorrect during enrollment.
  D. The user's account has no mail ID attribute In Active Directory.
  A. All devices were previously disabled by the administrator.

• Question 19:

  You want to provision users and groups to a Netskope tenant. You have Microsoft Active Directory servers hosted in two different forests. Which statement is true about this scenario?

  A. You can use the Netskope Adapter Tool for user provisioning.
  B. You can use the Netskope virtual appliance for user provisioning
  C. You cannot provision users until you migrate to Azure AD or Okta.
  D. You can use SCIM version 2 for user provisioning.
  D. You can use SCIM version 2 for user provisioning.

• Question 20:

  You have deployed a development Web server on a public hosting service using self- signed SSL certificates. After some troubleshooting, you determined that when the Netskope client is enabled, you are unable to access the Web server over SSL. The default Netskope tenant steering configuration is in place.

  In this scenario, which two settings are causing this behavior? (Choose two.)

  A. SSL pinned certificates are blocked.
  B. Untrusted root certificates are blocked.
  C. Incomplete certificate trust chains are blocked.
  D. Self-signed server certificates are blocked.
  B. Untrusted root certificates are blocked.
  D. Self-signed server certificates are blocked.