Netskope NSK200 Online Practice Questions and Exam Preparation

Netskope NSK200 Online Questions & Answers

• Question 51:

  Recently your company implemented Zoom for collaboration purposes and you are attempting to inspect the traffic with Netskope. Your initial attempt reveals that you are not seeing traffic from the Zoom client that is used by all users. You must ensure that this traffic is visible to Netskope.

  In this scenario, which two steps must be completed to satisfy this requirement? (Choose two.)

  A. Create a steering exception for Zoom to ensure traffic is reaching Netskope.
  B. Create a Do Not Decrypt SSL policy for the Zoom application suite.
  C. Remove the Zoom certificate-pinned application from the default steering configuration.
  D. Remove the default steering exception for the Web Conferencing Category.
  C. Remove the Zoom certificate-pinned application from the default steering configuration.
  D. Remove the default steering exception for the Web Conferencing Category.

• Question 52:

  With Netskope DLP, which feature would be used to detect keywords such as "Confidential" or "Access key"?

  A. Regular Expression
  B. Exact Match
  C. Fingerprint Classification
  D. Dictionary
  D. Dictionary

• Question 53:

  What are three methods to deploy a Netskope client? (Choose three.)

  A. Deploy Netskope client using SCCM.
  B. Deploy Netskope client using REST API v2.
  C. Deploy Netskope client using email invite.
  D. Deploy Netskope client using REST API v1.
  E. Deploy Netskope client using IdP.
  A. Deploy Netskope client using SCCM.
  C. Deploy Netskope client using email invite.
  E. Deploy Netskope client using IdP.

• Question 54:

  A company allows their users to access OneDrive on their managed laptops. It is against corporate policy to upload any documents to their personal OneDrive. The company needs to enforce this policy to protect their customer's sensitive data.

  What are two ways to enforce this policy? (Choose two.)

  A. Create DLP policies to block the upload of all the identified documents.
  B. Create DLP policies to allow document uploading only to the corporate OneDrive instance.
  C. Create a new application instance for the corporate OneDrive.
  D. Fingerprint all the documents to have a catalog of all the documents that the company needs to protect.
  A. Create DLP policies to block the upload of all the identified documents.
  B. Create DLP policies to allow document uploading only to the corporate OneDrive instance.

• Question 55:

  Netskope support advised you to enable DTLS for belter performance. You added firewall rules to allow UDP port 443 traffic. These settings are part of which configuration element when enabled in the Netskope tenant?

  A. Real-time Protection policies
  B. SSL decryption policies
  C. steering configuration
  D. client configuration
  D. client configuration

• Question 56:

  You are configuring GRE tunnels from a Palo Alto Networks firewall to a Netskope tenant with the Netskope for Web license enabled. Your tunnel is up as seen from the Netskope dashboard. You are unable to ping hosts behind the Netskope gateway.

  Which two statements are true about this scenario? (Choose two.)

  A. You need to call support to enable the GRE POP selection feature.
  B. Netskope only supports Web traffic through the tunnel.
  C. You can only ping the probe IP provided by Netskope.
  D. There is no client installed on the source hosts in your network.
  B. Netskope only supports Web traffic through the tunnel.
  C. You can only ping the probe IP provided by Netskope.

• Question 57:

  Review the exhibit.

  

  You are at the Malware Incident page. A virus was detected by the Netskope Heuristics Engine. Your security team has confirmed that the virus was a test data file You want to allow the security team to use this file Referring to the exhibit, which two statements are correct? (Choose two.)

  A. Click the "Add To File Filter button to add the IOC to a file list.
  B. Contact the CrowdStrike administrator to have the file marked as safe.
  C. Click the ''Lookup VirusTotal" button to verify if this IOC is a false positive.
  D. Create a malware detection profile and update the file hash list with the IOC.
  A. Click the "Add To File Filter button to add the IOC to a file list.
  C. Click the ''Lookup VirusTotal" button to verify if this IOC is a false positive.

• Question 58:

  Your customer is migrating all of their applications over to Microsoft 365 and Azure. They have good practices and policies in place (or their inline traffic, but they want to continuously detect reconfigurations and enforce compliance standards. Which two solutions would satisfy their requirements? (Choose two.)

  A. Netskope SaaS Security Posture Management
  B. Netskope Cloud Confidence Index
  C. Netskope Risk Insights
  D. Netskope Continuous Security Assessment
  A. Netskope SaaS Security Posture Management
  D. Netskope Continuous Security Assessment

• Question 59:

  Review the exhibit.

  

  You want to discover new cloud applications in use within an organization.

  Referring to the exhibit, which three methods would accomplish this task? (Choose three.)

  A. Set up API-enabled Protection instances for SaaS applications.
  B. Deploy an On-Premises Log Parser (OPLP).
  C. Use forward proxy steering methods to direct cloud traffic to Netskope
  D. View "All Apps" within the Cloud Confidence Index (CCI) In the Netskope Ul.
  E. Upload firewall or proxy logs directly into the Netskope platform.
  B. Deploy an On-Premises Log Parser (OPLP).
  C. Use forward proxy steering methods to direct cloud traffic to Netskope
  E. Upload firewall or proxy logs directly into the Netskope platform.

• Question 60:

  Which statement describes a requirement for deploying a Netskope Private Application (NPA) Publisher?

  A. The publisher must be deployed in a public cloud environment, such as AWS.
  B. The publisher must be deployed in a private data center.
  C. The publisher must be deployed on the network where the private application will be accessed.
  D. The publisher's name must match the name of the application process that it will access.
  C. The publisher must be deployed on the network where the private application will be accessed.