Netskope NSK300 Online Practice Questions and Exam Preparation

Netskope NSK300 Online Questions & Answers

• Question 41:

  You are implementing a solution to deploy Netskope for machine traffic in an AWS account across multiple VPCs. You want to deploy the least amount of tunnels while providing connectivity for all VPCs. How would you accomplish this task?

  A. Use IPsec tunnels from the AWS Virtual Private Gateway.
  B. Use GRE tunnels from the AWS Transit Gateway.
  C. Use GRE tunnels from the AWS Virtual Private Gateway
  D. Use IPsec tunnels from the AWS Transit Gateway.
  D. Use IPsec tunnels from the AWS Transit Gateway.

• Question 42:

  What is a Fast Scan component of Netskope Threat Detection?

  A. Heuristic Analysis
  B. Machine Learning
  C. Dynamic Analysis
  D. Statical Analysis
  B. Machine Learning

• Question 43:

  You recently began deploying Netskope at your company. You are steering all traffic, but you discover that the Real-time Protection policies you created to protect Microsoft OneDrive are not being enforced. Which default setting in the Ul would you change to solve this problem?

  A. Disable the default Microsoft appsuite SSL rule.
  B. Disable the default certificate-pinned application
  C. Remove the default steering exception for domains.
  D. Remove the default steering exception for Cloud Storage.
  C. Remove the default steering exception for domains.

• Question 44:

  You want customers to configure Real-time Protection policies. In which order should the policies be placed in this scenario?

  A. Threat, CASB, RBI,Web
  B. RBI, CASB, Web,Threat
  C. Threat, RBI, CASB,Web
  D. CASB, RBI,Threat,Web
  B. RBI, CASB, Web,Threat

• Question 45:

  A hospital has a patient form that they share with their patients over Gmail. The blank form can be freely shared among anyone. However, if the form has any information filled out. the document is considered confidential. Which rule type should be used in the DLP profile to match such a document?

  A. Use fingerprint classification.
  B. Use a dictionary rule for all your patient names.
  C. Use Exact Match with patient names
  D. Use predefined DLP Rule(s) that match the patient name.
  A. Use fingerprint classification.

• Question 46:

  Review the exhibit.

  

  You are the proxy administrator for a medical devices company. You recently changed a pilot group of users from cloud app steering to all Web traffic. Pilot group users have started to report that they receive the error shown in the exhibit when attempting to access the company intranet site that is publicly available. During troubleshooting, you realize that this site uses your company's internal certificate authority for SSL certificates.

  Which three statements describe ways to solve this issue? (Choose three.)

  A. Import the root certificate for your internal certificate authority into Netskope.
  B. Bypass SSL inspection for the affected site(s).
  C. Create a Real-time Protection policy to allow access.
  D. Change the SSL Error Settings from Block to Bypass in the Netskope tenant.
  E. Instruct the user to proceed past the error message
  A. Import the root certificate for your internal certificate authority into Netskope.
  B. Bypass SSL inspection for the affected site(s).
  D. Change the SSL Error Settings from Block to Bypass in the Netskope tenant.

• Question 47:

  Your client is an NG-SWG customer. They are going to use the Explicit Proxy over Tunnel (EPoT) steering method. They have a specific list of domains that they do not want to steer to the Netskope Cloud. What would accomplish this task''

  A. Define exception domains in the PAC file.
  B. Define exceptions in the Netskope steering configuration
  C. Create a real-time policy with a bypass action.
  D. Use an SSL decryption policy.
  A. Define exception domains in the PAC file.

• Question 48:

  You deployed the Netskope Client for Web steering in a large enterprise with dynamic steering. The steering configuration includes a bypass rule for an application that is IP restricted. What is the source IP for traffic to this application when the user is on-premises at the enterprise?

  A. Loopback IPv4
  B. Netskope data plane gateway IPv4
  C. Enterprise Egress IPv4
  D. DHCP assigned RFC1918 IPv4
  C. Enterprise Egress IPv4

• Question 49:

  Your organization's software deployment team did the initial install of the Netskope Client with SCCM. As the Netskope administrator, you will be responsible for all up-to-date upgrades of the client. Which two actions would be required to accomplish this task9 (Choose two.)

  A. In the Client Configuration, set Upgrade Client Automatically to Latest Release.
  B. Set the installmode-IDP flag during the original Install.
  C. Set the autoupdate-on flag during the original Install.
  D. In the Client Configuration, set Upgrade Client Automatically to Specific Golden Release.
  A. In the Client Configuration, set Upgrade Client Automatically to Latest Release.
  C. Set the autoupdate-on flag during the original Install.

• Question 50:

  A company wants to capture and maintain sensitive Pll data in a relational database to help their customers. There are many employees and contractors that need access to sensitive customer data to perform their duties The company wants to prevent theexfiltrationof sensitive customer data by their employees and contractors.

  In this scenario. what would satisfy this requirement?

  A. fingerprinting
  B. exact data match
  C. regular expression
  D. machine learning
  A. fingerprinting