Netskope NSK200 Online Practice Questions and Exam Preparation

Netskope NSK200 Online Questions & Answers

• Question 41:

  You created the Netskope application in your IdP for user provisioning and validated that the API Integration settings are correct and functional. However, you are not able to push the user groups from the IdP into your Netskope tenant.

  A. The IdP group contains active users, as well as one or more deactivated users.
  B. The IdP does not have Create User permissions.
  C. You do not have enough users assigned to the IdP group.
  D. You failed to push the IdP users before attempting to push the IdP groups.
  A. The IdP group contains active users, as well as one or more deactivated users.

• Question 42:

  You are currently migrating users away from a legacy proxy to the Netskope client in the company's corporate offices. You have deployed the client to a pilot group; however, when the client attempts to connect to Netskope, it fails to establish a tunnel.

  In this scenario, what would cause this problem?

  A. The legacy proxy is intercepting SSL/TLS traffic to Netskope.
  B. The corporate firewall is blocking UDP port 443 to Netskope.
  C. The corporate firewall is blocking the Netskope EPoT address.
  D. The client cannot reach dns.google for EDNS resolution.
  B. The corporate firewall is blocking UDP port 443 to Netskope.

• Question 43:

  You discover the ongoing use of the native Dropbox client in your organization. Although Dropbox is not a corporate-approved application, you do not want to prevent the use of Dropbox. You do, however, want to ensure visibility into its usage.

  A. Change Windows and Mac steering exception actions to use Tunnel mode and set Netskope as the source IP address for SSO services.
  B. Modify the existing tenant steering exception configuration to block the Dropbox native application to force users to use the Dropbox website.
  C. Remove all Dropbox entries from the tenant steering SSL configuration entirely.
  D. Create a new tenant steering exception type of Destination Locations that contains the Dropbox application.
  D. Create a new tenant steering exception type of Destination Locations that contains the Dropbox application.

• Question 44:

  You are using Skope IT to analyze and correlate a security incident. You are seeing too many events generated by API policies. You want to filter for logs generated by the Netskope client only.

  A. Use the access_method filter and select Client from the dropdown menu.
  B. Use the access_method filter and select Tunnel from the dropdown menu.
  C. Use the access_method filter and select Logs from the dropdown menu.
  D. Use query mode and use access_method neq Client.
  A. Use the access_method filter and select Client from the dropdown menu.

• Question 45:

  You want to secure Microsoft Exchange and Gmail SMTP traffic for DLP using Netskope. Which statement is true about this scenario when using the Netskope client?

  A. Netskope can inspect outbound SMTP traffic for Microsoft Exchange and Gmail.
  B. Enable Cloud Firewall to Inspect Inbound SMTP traffic for Microsoft Exchange and Gmail.
  C. Netskope can inspect inbound and outbound SMTP traffic for Microsoft Exchange and Gmail.
  D. Enable REST API v2 to Inspect inbound SMTP traffic for Microsoft Exchange and Gmail.
  A. Netskope can inspect outbound SMTP traffic for Microsoft Exchange and Gmail.

• Question 46:

  Review the exhibit.

  

  Referring to the exhibit, which three statements are correct? (Choose three.)

  A. The request was processed successfully.
  B. A request was submitted to extract application event details.
  C. An invalid token was used.
  D. The request was limited to the first 5000 records.
  E. The request was confined to only the "Professional Networking and Social" category.
  A. The request was processed successfully.
  B. A request was submitted to extract application event details.
  D. The request was limited to the first 5000 records.

• Question 47:

  You are integrating Netskope tenant administration with an external identity provider. You need to implement role-based access control. Which two statements are true about this scenario? (Choose two.)

  A. The roles you want to assign must be present in the Netskope tenant.
  B. You do not need to define the administrators locally in the Netskope tenant after It Is integrated with IdP.
  C. You need to define the administrators locally in the Netskope tenant.
  D. Once integrated with IdP. you must append the "locallogin" URL to log in using IdP
  A. The roles you want to assign must be present in the Netskope tenant.
  C. You need to define the administrators locally in the Netskope tenant.

• Question 48:

  A city uses many types of forms, including permit applications. These forms contain personal and financial information of citizens. Remote employees download these forms and work directly with the citizens to complete them. The city wants to be able to identify and monitor the specific forms and block the employees from downloading completed forms.

  Which feature would you use to accomplish this task?

  A. exact data match (EDM)
  B. regular expressions (regex)
  C. document fingerprinting
  D. optical character recognition (OCR)
  C. document fingerprinting

• Question 49:

  Your company has a Symantec BlueCoat proxy on-premises and you want to deploy Netskope using proxy chaining. Which two prerequisites need to be enabled first in this scenario? (Choose two.)

  A. Disable SSL decryption.
  B. Disable the X-Authenticated-User header.
  C. Enable SSL decryption.
  D. Enable the X-Forwarded-For HTTP header
  C. Enable SSL decryption.
  D. Enable the X-Forwarded-For HTTP header

• Question 50:

  Review the exhibit.

  

  While diagnosing an NPA connectivity issue, you notice an error message in the Netskope client logs. Referring to the exhibit, what does this error represent?

  A. The Netskope client has been load-balanced to a different data center.
  B. The primary publisher is unavailable or cannot be reached.
  C. There Is an EDNS or LDNS resolution error.
  D. There Is an upstream device trying to intercept the NPA TLS connection.
  D. There Is an upstream device trying to intercept the NPA TLS connection.