Netskope NSK300 Online Practice Questions and Exam Preparation

Netskope NSK300 Online Questions & Answers

• Question 21:

  A company has deployed Explicit Proxy over Tunnel (EPoT) for their VDI users They have configured Forward Proxy authentication using Okta Universal Directory They have also configured a number of Real-time Protection policies that blockaccess to different Web categories for different AD groups so. for example, marketing users are blocked from accessing gambling sites. During User Acceptance Testing, they see inconsistent results where sometimes marketing users are able to access gambling sites and sometimes they are blocked as expected They are seeing this inconsistency based on who logs into the VDI server first.

  What is causing this behavior?

  A. Forward Proxy is not configured to use the Cookie Surrogate
  B. Forward Proxy is not configured to use the IP Surrogate
  C. Forward Proxy authentication is configured but not enabled.
  D. Forward Proxy is configured to use the Cookie Surrogate
  A. Forward Proxy is not configured to use the Cookie Surrogate

• Question 22:

  You want to enable the Netskope Client to automatically determine whether it is on- premises or off-premises. Which two options in the Netskope Ul would you use to accomplish this task? (Choose two.)

  A. the All Traffic option in the Steering Configuration section of the Ul
  B. the New Exception option in the Traffic Steering options of the Ul
  C. the Enable Dynamic Steering option in the Steering Configuration section of the Ul
  D. the On Premises Detection option under the Client Configuration section of the Ul
  C. the Enable Dynamic Steering option in the Steering Configuration section of the Ul
  D. the On Premises Detection option under the Client Configuration section of the Ul

• Question 23:

  Your company has a large number of medical forms that are allowed to exit the company when they are blank. If the forms contain sensitive data, the forms must not leave any company data centers, managed devices, or approved cloud environments. You want to create DLP rules for these forms.

  Which first step should you take to protect these forms?

  A. Use Netskope Secure Forwarder to create EDM hashes of all forms.
  B. Use Netskope Secure Forwarder to create an MIP tag for all forms.
  C. Use Netskope Secure Forwarder to create fingerprints of all forms.
  D. Use Netskope Secure Forwarder to create an ML Model of all forms
  C. Use Netskope Secure Forwarder to create fingerprints of all forms.

• Question 24:

  Review the exhibit.

  

  AcmeCorp has recently begun using Microsoft 365. The organization is concerned that employees will start using third-party non-AcmeCorp OneDrive instances to store company data. The CISO asks you to use Netskope to create a policy that ensures that no data is being uploaded to non-AcmeCorp instances of OneDrive.

  Referring to the exhibit, which two policies would accomplish this posture? (Choose two.)

  A. 4
  B. 3
  C. 2
  D. 1
  B. 3
  C. 2

• Question 25:

  You are implementing Netskope Cloud Exchange in your company lo include functionality provided by third-party partners. What would be a reason for using Netskope Cloud Risk Exchange in this scenario?

  A. to ingest events and alerts from a Netskope tenant
  B. to feed SOC with detection and response services
  C. to map multiple scores to a normalized range
  D. to automate service tickets from alerts of interest
  D. to automate service tickets from alerts of interest

• Question 26:

  You want to integrate with a third-party DLP engine that requires ICAP. In this scenario, which Netskope platform component must be configured?

  A. On-Premises Log Parser (OPLP)
  B. Secure Forwarder
  C. Netskope Cloud Exchange
  D. Netskope Adapter
  D. Netskope Adapter

• Question 27:

  A recent report states that users are using non-sanctioned Cloud Storage platforms to share data Your CISO asks you for a list of aggregated users, applications, and instance IDs to increase security posture Which Netskope tool would be used to obtain this data?

  A. Advanced Analytics
  B. Behavior Analytics
  C. Applications in Skope IT
  D. Cloud Confidence Index (CCI)
  A. Advanced Analytics

• Question 28:

  Review the exhibit.

  

  You created an SSL decryption policy to bypass the inspection of financial and accounting Web categories. However, you still see banking websites being inspected. Referring to the exhibit, what are two possible causes of this behavior? (Choose two.)

  A. The policy is in a "disabled" state.
  B. An incorrect category has been selected
  C. The policy is in a "pending changes" state.
  D. An incorrect action has been specified.
  B. An incorrect category has been selected
  D. An incorrect action has been specified.

• Question 29:

  Your CISO asks that you to provide a report with a visual representation of the top 10 applications (by number of objects) and their risk score. As the administrator, you decide to use a Sankey visualization in Advanced Analytics to represent the data in an efficient manner.

  In this scenario, which two field types are required to produce a Sankey Tile in your report? {Choose two.)

  A. Dimension
  B. Measure
  C. Pivot Ranks
  D. Period of Type
  A. Dimension
  B. Measure

• Question 30:

  You want to verify that Google Drive is being tunneled to Netskope by looking in the nsdebuglog file. You are using Chrome and the Netskope Client to steer traffic. In this scenario, what would you expect to see in the log file?

  A. 2022/01/0 01:00:00.001010 stAgentNE p752b t28da7 info tunnel.cpp:712 nsTunnel TLS [sessId 502] Tunneling flow from addr: 1.0.0.1:64000, process: google drive to host: play.googleapis.com, addr: 172.217.4.46:443 to nsProxy
  B. 2022/01/0 01:00:00.001010 stAgentNE p752b t28da7 info tunnel.cpp:712 nsTunnel TLS [sessId 502] Tunneling flow from addr: 1.0.0.1:63720, process: google chrome helper to host: drive.google.com, addr: 172.217.4.46:443 to nsProxy
  C. 2022/01/0 01:00:00.001010 stAgentNE p752b t28da7 info BypassAppMgr.cpp:538 BypassAppMgr Bypassing UDP flow to process google chrome helper ip: 172.217.4.46, Port: 443, host: drive.google.com
  D. 2022/01/0 01:00:00.001010 stAgentNE p752b t28da7 info AppProxyProvider.mm:303 main New UDP flow: Process = google chrome helper, IP:Port = [8.8.8.8:53]
  B. 2022/01/0 01:00:00.001010 stAgentNE p752b t28da7 info tunnel.cpp:712 nsTunnel TLS [sessId 502] Tunneling flow from addr: 1.0.0.1:63720, process: google chrome helper to host: drive.google.com, addr: 172.217.4.46:443 to nsProxy