Netskope NSK300 Online Practice Questions and Exam Preparation

Netskope NSK300 Online Questions & Answers

• Question 11:

  You are troubleshooting an issue with users who are unable to reach a financial SaaS application when their traffic passes through Netskope. You determine that this is because of IP restrictions in place with the SaaS vendor. You are unable to add Netskope's IP ranges at this time, but need to allow the traffic.

  How would you allow this traffic?

  A. Use NPAto implement Source IP anchonng so the traffic will egress from the corporate data center.
  B. Use Explicit Proxy Over Tunnel (EPoT) so the traffic will egress from the corporate data center.
  C. Use Cloud Explicit Proxy so the traffic will egress from the corporate data center
  D. Use an IPsec tunnel to forward traffic so it will egress from the corporate data center
  C. Use Cloud Explicit Proxy so the traffic will egress from the corporate data center

• Question 12:

  You are using Netskope CSPM for security and compliance audits across your multi-cloud environments. To decrease the load on the security operations team, you are researching how to auto-re mediate some of the security violations found in low-risk environments.

  Which statement is correct in this scenario?

  A. Netskope does not support automatic remediation of security violation results due to the high risk associated with it.
  B. You can use Netskope API-enabled Protection for auto-remediation of security violation results.
  C. You can use Netskope Auto-remediation frameworks from the public Netskope GitHub Open Source repository for auto-re mediation of security violation results.
  D. You can use Netskope Cloud Exchange for auto-remediation of security violation results.
  C. You can use Netskope Auto-remediation frameworks from the public Netskope GitHub Open Source repository for auto-re mediation of security violation results.

• Question 13:

  Your company purchased Netskope's Next Gen Secure Web Gateway You are working with your network administrator to create GRE tunnels to send traffic to Netskope Your network administrator has set up the tunnel, keepalives. and a policy-based route on your corporate router to send all HTTP and HTTPS traffic to Netskope. You want to validate that the tunnel is configured correctly and that traffic is flowing.

  In this scenario, which two statements are correct? (Choose two.)

  A. You can use your local router or network device to verify that keepalives are being received and traffic is flowing to Netskope.
  B. You must use your own monitoring tools to verify that the tunnel is up.
  C. You can verify that the tunnel is up and receiving traffic in the Netskope Ul under Settings > Security Cloud Platform > GRE.
  D. You can verify that the tunnel is up in the Netskope Trust portal at https://trust netskope.com/.
  A. You can use your local router or network device to verify that keepalives are being received and traffic is flowing to Netskope.
  C. You can verify that the tunnel is up and receiving traffic in the Netskope Ul under Settings > Security Cloud Platform > GRE.

• Question 14:

  Users at your company's branch office in San Francisco report that their clients are connecting, but websites and SaaS applications are slow When troubleshooting, you notice that the users are connected to a Netskope data plane in New York where your company's headquarters is located.

  What is a valid reason for this behavior?

  A. The Netskope Client's on-premises detection check failed.
  B. The Netskope Client's default DNS over HTTPS call is failing.
  C. The closest Netskope data plane to San Francisco is unavailable.
  D. The Netskope Client's DNS call to Secure Forwarder is failing
  C. The closest Netskope data plane to San Francisco is unavailable.

• Question 15:

  You successfully configured Advanced Analytics to identify policy violation trends Upon further investigation, you notice that the activity is NULL. Why is this happening in this scenario?

  A. The SSPM policy was not configured during setup.
  B. The REST API v1 token has expired.
  C. A policy violation was identified using API Protection.
  D. A user accessed a static Web page.
  D. A user accessed a static Web page.

• Question 16:

  You are already using Netskope CSPM to monitor your AWS accounts for compliance. Now you need to allow access from your company-managed devices running the Netskope Client to only Amazon S3 buckets owned by your organization. You must ensure that any current buckets and those created in the future will be allowed

  Which configuration satisfies these requirements?

  A. Steering: Cloud Apps Only, All Traffic Policy type: Real-time Protection Constraint: Storage. Bucket Does Not Match -ALLAccounts Action: Block
  B. Steering: Cloud Apps Only Policy type: Real-time Protection Constraint: Storage. Bucket Does Not Match *@myorganization.com Action: Block
  C. Steering: Cloud Apps Only. All Traffic Policy type: Real-time Protection Constraint: Storage. Bucket Does Match -ALLAccounts Action: Allow
  D. Steering: All Web Traffic Policy type: API Data Protection Constraint: Storage, Bucket Does Match *@myorganization.com Action: Allow
  C. Steering: Cloud Apps Only. All Traffic Policy type: Real-time Protection Constraint: Storage. Bucket Does Match -ALLAccounts Action: Allow

• Question 17:

  Given the following:

  user eq '[email protected]' and access_method eq 'Client' and activity eq 'Download' or activity eq 'Upload' and site eq 'Amazon S3'

  Which result does this Skope IT query provide?

  A. The query returns all events of [email protected] downloading or uploading to or from the site 'Amazon S3" using the Netskope Client.
  B. The query returns all events of an IP address downloading or uploading to or from Amazon S3 using the Netskope Client.
  C. The query returns all events of everyone except [email protected] downloading or uploading to or from the site "Amazon S3" using the Netskope Client.
  D. The query returns all events of [email protected] downloading or uploading to or from the application "Amazon S3" using the Netskope Client.
  A. The query returns all events of [email protected] downloading or uploading to or from the site 'Amazon S3" using the Netskope Client.

• Question 18:

  Your company just had a new Netskope tenant provisioned and you are asked to create a secure tenant configuration. In this scenario, which two default settings should you change? {Choose two.)

  A. Change Safe Search to Disabled
  B. Change Untrusted Root Certificate to Block.
  C. Change the No SNI setting to Block.
  D. Change "Disallow concurrent logins by an Admin" to Enabled.
  B. Change Untrusted Root Certificate to Block.
  D. Change "Disallow concurrent logins by an Admin" to Enabled.

• Question 19:

  You jus! deployed and registered an NPA publisher for your first private application and need to provide access to this application for the Human Resources (HR) users group only. How would you accomplish this task?

  A. 1. Enable private app steering in the Steering Configuration assigned to the HR group. 2.Create a new Private App. 3.Create a new Real-time Protection policy as follows; Source = HR user group Destination = Private App Action = Allow
  B. 1. Create a new private app and assign it to the HR user group. 2. Create a new Real-time Protection policy as follows: Source = HR user group Destination = Private App Action = Allow.
  C. 1. Enable private app steering in Tenant Steering Configuration. 2. Create a new private app and assign it to the HR user group.
  D. 1. Enable private app steering in the Steering Configuration assigned to the HR group. 2.Create a new private app and assign it to the HR user group 3.Create a new Real-time Protection policy as follows: Source = HR user group Destination = Private App Action = Allow
  D. 1. Enable private app steering in the Steering Configuration assigned to the HR group. 2.Create a new private app and assign it to the HR user group 3.Create a new Real-time Protection policy as follows: Source = HR user group Destination = Private App Action = Allow

• Question 20:

  You have an NG-SWG customer that currently steers all Web traffic to Netskope using the Netskope Client. They have identified one new native application on Windows devices that is a certificate-pinned application. Users are not able to access the application due to certificate pinning. The customer wants to configure the Netskope Client so that the traffic from the application is steered to Netskope and the application works as expected.

  Which two methods would satisfy the requirements? (Choose two.)

  A. Bypass traffic using the bypass action in the Real-time Protection policy.
  B. Configure the SSL Do Not Decrypt policy to not decrypt traffic for domains used by the native application.
  C. Configure domain exceptions in the steering configuration for the domains used by the native application.
  D. Tunnel traffic to Netskope and bypass traffic inspection at the Netskope proxy.
  B. Configure the SSL Do Not Decrypt policy to not decrypt traffic for domains used by the native application.
  C. Configure domain exceptions in the steering configuration for the domains used by the native application.