Netskope NSK200 Online Practice Questions and Exam Preparation

Netskope NSK200 Online Questions & Answers

• Question 31:

  You are implementing tenant access security and governance controls for privileged users. You want to start with controls that are natively available within the Netskope Cloud Security Platform and do not require external or third-party integration.

  Which three access controls would you use in this scenario? (Choose three.)

  A. IP allowlisting to control access based upon source IP addresses.
  B. Login attempts to set the number of failed attempts before the admin user is locked out of the Ul.
  C. Applying predefined or custom roles to limit the admin's access to only those functions required for their job.
  D. Multi-factor authentication to verify a user's authenticity.
  E. History-based access control based on past security actions.
  A. IP allowlisting to control access based upon source IP addresses.
  B. Login attempts to set the number of failed attempts before the admin user is locked out of the Ul.
  C. Applying predefined or custom roles to limit the admin's access to only those functions required for their job.

• Question 32:

  Your company has Microsoft Azure ADFS set up as the Identity Provider (idP). You need to deploy the Netskope client to all company users on Windows laptops without user intervention. In this scenario, which two deployment options would you use? (Choose two.)

  A. Deploy the Netskope client with SCCM.
  B. Deploy the Netskope client with Microsoft GPO.
  C. Deploy the Netskope client using IdP.
  D. Deploy the Netskope client using an email Invitation.
  A. Deploy the Netskope client with SCCM.
  B. Deploy the Netskope client with Microsoft GPO.

• Question 33:

  Your company has many users that are remote and travel often. You want to provide the greatest visibility into their activities, even while traveling. Using Netskope. which deployment method would be used in this scenario?

  A. Use proxy chaining.
  B. Use a Netskope client.
  C. Use an IPsec tunnel.
  D. Use a GRE tunnel.
  B. Use a Netskope client.

• Question 34:

  The director of IT asks for confirmation If your organization's Web traffic would be blocked when the Netskope client fails. In this situation, what would confirm the fail close status?

  A. Perform a right-click on the Netskope client icon using your mouse.
  B. Review the nsdebuglog.log.
  C. View Application events.
  D. Review user settings.
  B. Review the nsdebuglog.log.

• Question 35:

  Review the exhibit.

  

  You are asked to create a DLP profile that will ensure that the data shown in the exhibit cannot be uploaded to a user's personal Google Drive. What must be used to accomplish this task?

  A. document fingerprinting
  B. ML image classifier
  C. optical character recognition
  D. INTL-PAN-Name rule
  C. optical character recognition

• Question 36:

  The risk team at your company has determined that traffic from the sales team to a custom Web application should not be inspected by Netskope. All other traffic to the Web application should continue to be inspected. In this scenario, how would you accomplish this task?

  A. Create a Do Not Decrypt Policy using User Group and Domain in the policy page.
  B. Create a Do Not Decrypt Policy using Application in the policy page and a Steering Exception for Group
  C. Create a Do Not Decrypt Policy using Destination IP and Application in the policy page.
  D. Create a Do Not Decrypt Policy using Source IP and Application in the policy page.
  A. Create a Do Not Decrypt Policy using User Group and Domain in the policy page.

• Question 37:

  An engineering firm is using Netskope DLP to identify and block sensitive documents, including schematics and drawings. Lately, they have identified that when these documents are blocked, certain employees may be taking screenshots and uploading them. They want to block any screenshots from being uploaded.

  Which feature would you use to satisfy this requirement?

  A. exact data match (EDM)
  B. document fingerprinting
  C. ML image classifier
  D. optical character recognition (OCR)
  C. ML image classifier

• Question 38:

  Your company asks you to use Netskope to integrate with Endpoint Detection and Response (EDR) vendors such as CrowdStrike. In this scenario, what is a requirement for a successful Integration and sharing of threat data?

  A. API Client ID
  B. device classification
  C. custom log parser
  D. user endpoint
  A. API Client ID

• Question 39:

  Your learn is asked to Investigate which of the Netskope DLP policies are creating the most incidents. In this scenario, which two statements are true? (Choose two.)

  A. The Skope IT Applications tab will list the top five DLP policies.
  B. You can see the top Ave DLP policies triggered using the Analyze feature
  C. You can create a report using Reporting or Advanced Analytics.
  D. The Skope IT Alerts tab will list the top five DLP policies.
  B. You can see the top Ave DLP policies triggered using the Analyze feature
  C. You can create a report using Reporting or Advanced Analytics.

• Question 40:

  Review the exhibit.

  add log-upload syslogng parserconfig set log-upload syslogng parserconfig 0 logsource

  You are asked to deploy a virtual appliance OPLP to accept syslog messages directly from the enterprise Palo Alto Networks firewall. You believe that you have configured the OPLP to accept the firewall logs, yet they are not appearing in Risk Insights. Referring to the exhibit, which parser name would be required to complete the new configuration?

  A. panw-syslog
  B. sfwder
  C. custom-csv
  D. squid
  A. panw-syslog