Netskope NSK200 Online Practice Questions and Exam Preparation

Netskope NSK200 Online Questions & Answers

• Question 61:

  You are using the Netskope DLP solution. You notice that valid credit card numbers in a file that you just uploaded to an unsanctioned cloud storage solution are not triggering a policy violation. You can see the Skope IT application events for this traffic but no DLP alerts.

  Which statement is correct in this scenario?

  A. Netskope client is not enabled.
  B. You have set the severity threshold to a higher value.
  C. Netskope client is enabled, but API protection for the SaaS application is not configured.
  D. Credit card numbers are entered with a space or dash separator and not as a 16-digit consecutive number.
  D. Credit card numbers are entered with a space or dash separator and not as a 16-digit consecutive number.

• Question 62:

  You have deployed Netskope Secure Web Gateway (SWG). Users are accessing new URLs that need to be allowed on a daily basis. As an SWG administrator, you are spending a lot of time updating Web policies. You want to automate this process without having to log into the Netskope tenant

  Which solution would accomplish this task?

  A. You can use Cloud Log Shipper.
  B. You can minimize your work by sharing URLs with Netskope support.
  C. You can use Cloud Risk Exchange.
  D. You can use REST API to update the URL list.
  D. You can use REST API to update the URL list.

• Question 63:

  You want the ability to perform automated remediation of misconfigurations on GitHub, Microsoft 365, Salesforce, ServiceNow, and Zoom.

  A. Netskope Infrastructure as a Service
  B. Netskope Remote Browser Isolation
  C. Netskope Cloud Firewall
  D. Netskope SaaS Security Posture Management
  D. Netskope SaaS Security Posture Management

• Question 64:

  Your customer is concerned about malware in their AWS S3 buckets. What two actions would help with this scenario? (Choose two.)

  A. Create a real-time policy to block malware uploads to their AWS instances.
  B. Enable Threat Protection (Malware Scan) for all of their AWS instances to Identify malware.
  C. Create an API protection policy to quarantine malware in their AWS S3 buckets.
  D. Create a threat profile to quarantine malware in their AWS S3 buckets.
  B. Enable Threat Protection (Malware Scan) for all of their AWS instances to Identify malware.
  C. Create an API protection policy to quarantine malware in their AWS S3 buckets.

• Question 65:

  Your customer has deployed the Netskope client to secure their Web traffic. Recently, they have enabled Cloud Firewall (CFW) to secure all outbound traffic for their endpoints. Through a recent acquisition, they must secure all outbound traffic at several remote offices where they have access to the local security stack (routers and firewalls). They cannot install the Netskope client.

  A. They can configure Reverse Proxy integrated with their IdP.
  B. They can deploy Netskope's DPOP to steer the targeted traffic to the Netskope Security Cloud.
  C. They can use IPsec and GRE tunnels with Cloud Firewall.
  D. They can secure the targeted outbound traffic using Netskope's Cloud Threat Exchange (CTE).
  C. They can use IPsec and GRE tunnels with Cloud Firewall.

• Question 66:

  Review the exhibit.

  

  Your company uses Google as the corporate collaboration suite; however, corporate policy restricts the use of personal Google services. The exhibit provides a partially completed policy to ensure that users cannot log into their personal account.

  What should be added to achieve the desired outcome in this scenario?

  A. Google Gmail app
  B. User Constraint
  C. DLP profile
  D. Device classification
  B. User Constraint

• Question 67:

  Review the exhibit.

  

  You are asked to create a new role that allows analysts to view Events and Reports while providing user privacy. You need to avoid directly exposing identities and user location information. Which three fields must you obfuscate in this scenario? (Choose three.)

  A. User IPs
  B. User names
  C. App names, URLs, and destination IPs
  D. File and object names
  E. Source location information
  A. User IPs
  B. User names
  E. Source location information

• Question 68:

  Your company asks you to use Netskope to integrate with Endpoint Detection and Response (EDR) vendors such as Crowdstrike. Which two requirements are needed for a successful integration and sharing of threat data? (Choose two.)

  A. Remediation profile
  B. Device classification
  C. API Client ID
  D. Custom log parser
  A. Remediation profile
  C. API Client ID

• Question 69:

  Your customer currently only allows users to access the corporate instance of OneDrive using SSO with the Netskope client. The users are not permitted to take their laptops when vacationing, but sometimes they must have access to documents on OneDrive when there is an urgent request. The customer wants to allow employees to remotely access OneDrive from unmanaged devices while enforcing DLP controls to prohibit downloading sensitive files to unmanaged devices.

  Which steering method would satisfy the requirements for this scenario?

  A. Use a reverse proxy integrated with their SSO.
  B. Use proxy chaining with their cloud service providers integrated with their SSO.
  C. Use a forward proxy integrated with their SSO.
  D. Use a secure forwarder integrated with an on-premises proxy.
  A. Use a reverse proxy integrated with their SSO.

• Question 70:

  Which object would be selected when creating a Malware Detection profile?

  A. DLP profile
  B. File profile
  C. Domain profile
  D. User profile
  B. File profile