Exit demo NSK200 Netskope Certified Cloud Security Integrator (NCCSI) PDF format · free preview

Netskope NSK200 - Questions & Answers

Free preview · every answer includes a full explanation

Product page: https://prepkeys.com/nsk200.html

Question 1
Multiple choice

Your customer has some managed Windows-based endpoints where they cannot add any clients or agents. For their users to have secure access to their SaaS application, you suggest that the customer use Netskope's Explicit Proxy.

Which two configurations are supported for this use case? (Choose two.)

A.

Endpoints can be configured to directly use the Netskope proxy.

B.

Endpoints must have separate steering configurations in the tenant settings.

C.

Endpoints must be configured in the device section of the tenant to interoperate with all proxies.

D.

Endpoints can be configured to use a Proxy Auto Configuration (PAC) file.

Question 2
Multiple choice

What are three methods to deploy a Netskope client? (Choose three.)

A.

Deploy Netskope client using SCCM.

B.

Deploy Netskope client using REST API v2.

C.

Deploy Netskope client using email invite.

D.

Deploy Netskope client using REST API v1.

E.

Deploy Netskope client using IdP.

Question 3
Single choice

Your company needs to keep quarantined files that have been triggered by a DLP policy.
In this scenario, which statement Is true?

A.

The files are stofed remotely In your data center assigned In the Quarantine profile.

B.

The files are stored In the Netskope data center assigned in the Quarantine profile.

C.

The files are stored In the Cloud provider assigned In the Quarantine profile.

D.

The files are stored on the administrator console PC assigned In the Quarantine profile.

Question 4
Single choice

Which object would be selected when creating a Malware Detection profile?

A.

DLP profile

B.

File profile

C.

Domain profile

D.

User profile

Question 5
Single choice

You are comparing the behavior of Netskope's Real-time Protection policies to API Data Protection policies.
In this Instance, which statement is correct?

A.

All real-time policies are enforced, regardless of sequential order, while API policies are analyzed sequentially from top to bottom and stop once a policy Is matched.

B.

Both real-time and API policies are analyzed sequentially from top to bottom and stop once a policy Is matched.

C.

All API policies are enforced, regardless of sequential order, while real-time policies are analyzed sequentially from top to bottom and stop once a policy Is matched.

D.

Both real-time and API policies are all enforced, regardless of sequential order.

Question 6
Single choice

You are troubleshooting an issue with Microsoft where some users complain about an issue accessing OneDrive and SharePoint Online. The configuration has the Netskope client deployed and active for most users, but some Linux machines are routed to Netskope using GRE tunnels. You need to disable inspection for all users to begin troubleshooting the issue.

In this scenario, how would you accomplish this task?

A.

Create a Real-time Protection policy to isolate Microsoft 365.

B.

Create a Do Not Decrypt SSL policy for the Microsoft 365 App Suite.

C.

Create a steering exception for the Microsoft 365 domains.

D.

Create a Do Not Decrypt SSL policy for OneDrive.

Question 7
Multiple choice

You notice that your Netskope client icon has a red dot and see "Disabled due to error" when hovering the mouse over the icon.

What are two reasons for this message? (Choose two.)

A.

The client service is manually stopped.

B.

The steering exceptions are incorrect.

C.

The client health check has failed.

D.

The client traffic is directed over iPsec.

Question 8
Single choice

Review the exhibit.

add log-upload syslogng parserconfig set log-upload syslogng parserconfig 0

logsource <log-source>

You are asked to deploy a virtual appliance OPLP to accept syslog messages directly from the enterprise Palo Alto Networks firewall. You believe that you have configured the OPLP to accept the firewall logs, yet they are not appearing in Risk Insights.
Referring to the exhibit, which parser name would be required to complete the new configuration?

A.

panw-syslog

B.

sfwder

C.

custom-csv

D.

squid

Question 9
Single choice

Review the exhibit.

You are asked to restrict users from accessing YouTube content tagged as Sport. You created the
required real-time policy; however, users can still access the content Referring to the exhibit, what is the problem?

A.

The website is in a steering policy exception.

B.

The policy changes have not been applied.

C.

The YouTube content cannot be controlled.

D.

The traffic matched a Do Not Decrypt policy

Question 10
Single choice

Review the exhibit.

You are asked to create a DLP profile that will ensure that the data shown in the exhibit cannot be uploaded to a user's personal Google Drive.

What must be used to accomplish this task?

A.

document fingerprinting

B.

ML image classifier

C.

optical character recognition

D.

INTL-PAN-Name rule

Showing 10 of 93 questions · Unlock the full set