Netskope NSK300 Online Practice Questions and Exam Preparation

Netskope NSK300 Online Questions & Answers

• Question 31:

  You are deploying the Netskope Client to Windows devices. The following command line would be used to install the client MSI file:

  msiexec /I NSClient.msi token= host= [mode=peruserconfig | installmode=IDP [userconfiglocation=]] fail-close=[nonpa|all] [autoupdate=on|off]

  In this scenario, what is referring to in the command line?

  A. a Netskope user identifier
  B. the Netskope organization ID
  C. the URL of the IdP used to authenticate the users
  D. a private token given to you by the SCCM administrator
  B. the Netskope organization ID

• Question 32:

  You do not want a scheduled Advanced Analytics dashboard to be automatically updated when Netskope makes improvements to that dashboard. In this scenario, what would you do to retain the original dashboard?

  A. Create a new dashboard from scratch that mimics the Netskope dashboard you want to use.
  B. Copy the dashboard into your Group or Personal folders and schedule from these folders.
  C. Ask Netskope Support to provide the dashboard and import into your Personal folder.
  D. Download thedashboard you want and Import from File into your Group or Personal folder.
  D. Download thedashboard you want and Import from File into your Group or Personal folder.

• Question 33:

  Your Netskope Client tunnel has connected to Netskope; however, the user is not receiving any steering or client configuration updates What would cause this issue?

  A. The client is unable to establish communication to add-on-[tenantl.goskope.com.
  B. The client is unable to establish communication to gateway-(tenant|.goskope.com.
  C. The Netskope Client service is not running.
  D. An invalid steering exception was created in the tenant
  C. The Netskope Client service is not running.

• Question 34:

  You have multiple networking clients running on an endpoint and client connectivity is a concern. You are configuring co-existence with a VPN solution in this scenario, what is recommended to prevent potential routing issues?

  A. Configure the VPN to split tunnel traffic by adding the Netskope IP and Google DNS ranges and set to Exclude in the VPN configuration.
  B. Modify the VPN to operate in full tunnel mode at Layer 3. so that the Netskope agent will always see the traffic first.
  C. Configure the VPN to full tunnel traffic and add an SSL Do Not Decrypt policy to the VPN configuration for all Netskope traffic.
  D. Configure a Network Location with the VPN IP ranges and add it as a Steering Configuration exception.
  B. Modify the VPN to operate in full tunnel mode at Layer 3. so that the Netskope agent will always see the traffic first.

• Question 35:

  A company needs to block access to their instance of Microsoft 365 from unmanaged devices. They have configured Reverse Proxy and have also created a policy that blocks login activity for the AD group "marketing-users" for theReverse Proxy access method. During UAT testing, they notice that access from unmanaged devices to Microsoft 365 is not blocked for marketing users.

  What is causing this issue?

  A. There is a missing group name in the SAML response.
  B. The username in the name ID field is not in the format of the e-mail address.
  C. There is an invalid certificate in the SAML response.
  D. The username in the name ID field does not have the "marketing-users" group name.
  A. There is a missing group name in the SAML response.

• Question 36:

  You are consuming Audit Reports as part of a Salesforce API integration. Someone has made a change to a Salesforce account record field that should not have been made and you are asked to venfy the previous value of the structured data field. You have the approximate date and time of the change, user information, and the new field value.

  How would you accomplish this task?

  A. Create a classic report and apply a query that filters on the changed field value.
  B. Use the Application Events Data Collection within Advanced Analytics and filter on the changed field value.
  C. Query Skope IT Page Events and look for the specific Page URL that was called under the Application section.
  D. Query Skope IT for an AccessMethod of API Connector and search Application Event Details for the Old Value field using the User details and Edit Activity.
  D. Query Skope IT for an AccessMethod of API Connector and search Application Event Details for the Old Value field using the User details and Edit Activity.

• Question 37:

  You are asked to ensure that a Web application your company uses is both reachable and decrypted by Netskope. This application is served using HTTPS on port 6443. Netskope is configured with a default Cloud Firewall configuration and the steering configuration is set for All Traffic.

  Which statement is correct in this scenario?

  A. Create a Firewall App in Netskope along with the corresponding Real-time Protection policy to allow the traffic.
  B. Nothing isrequired since Netskope is steering all traffic.
  C. Enable "Steernon-standard ports" in the steering configuration and add the domain and port as a new non-standard port
  D. Enable "Steer non-standard ports" in the steering configuration and create a corresponding Real-time Protection policy to allow the traffic
  C. Enable "Steernon-standard ports" in the steering configuration and add the domain and port as a new non-standard port

• Question 38:

  You have users connecting to Netskope from around the world You need a way for your NOC to quickly view the status of the tunnels and easily visualize where the tunnels are located Which Netskope monitoring tool would you use in this scenario?

  A. Network Steering in Digital Experience Management
  B. Network Events in Skope IT
  C. Web Usage Summary in Advanced Analytics
  D. Alerts in Skope IT
  A. Network Steering in Digital Experience Management

• Question 39:

  You created a Real-time Protection policy that blocks all activities to non-corporate S3 buckets, but determine that the policy is too restrictive. Specifically, users are complaining that normal websites have stopped rendering properly. How would you solve this problem?

  A. Create a Real-time Protection policy to allow the Browse activity to the Amazon S3 application.
  B. Create a Real-time Protection policy to allow the Browse activity to the Cloud Storage category
  C. Create a Real-time Protection policy to allow the Download activity to the Cloud Storage category
  D. Create a Real-time Protection policy to allow the Download activity to the Amazon S3 application
  B. Create a Real-time Protection policy to allow the Browse activity to the Cloud Storage category

• Question 40:

  You are asked to create a customized restricted administrator role in your Netskope tenant for a newly hired employee. Which two statements are correct in this scenario? (Choose two.)

  A. An admin role prevents admins from downloading and viewing file content by default.
  B. The scope of the data shown in the Ul can be restricted to specific events.
  C. All role privileges default to Read Only for all functional areas.
  D. Obfuscation can be applied to all functional areas.
  A. An admin role prevents admins from downloading and viewing file content by default.
  C. All role privileges default to Read Only for all functional areas.