[Aug-2024] Netskope NSK101 Exam Practice Test Questions – PracticeMaterial [Q13-Q34]

NO.13 You have an issue with the Netskope client connecting to the tenant.
In this scenario, what are two ways to collect the logs from the client machine? (Choose two.)

from the Netskope client Ul About page

from the command line using the nsdiag command

from the Netskope client system tray icon

from the Netskope client Ul Configuration page

NO.14 What are two primary advantages of Netskope’s Secure Access Service Edge (SASE) architecture? (Choose two.

no on-premises hardware required for policy enforcement

Bayesian spam filtering

Endpoint Detection and Response (EDR)

single management console

NO.15 When using an out-of-band API connection with your sanctioned cloud service, what are two capabilities available to the administrator? (Choose two.)

to quarantine malware

to find sensitive content

to block uploads

to allow real-time access

NO.16 What are two characteristics of Netskope’s Private Access Solution? (Choose two.)

It provides protection for private applications.

It provides access to private applications.

It acts as a cloud-based firewall.

It requires on-premises hardware.

NO.17 Exhibit

Which portion of the interface shown in the exhibit allows an administrator to set severity, assign ownership, track progress, and perform forensic analysis with excerpts of violating content?

Skope IT-> Alerts

Incidents -> DLP

API-enabled Protection -> Inventory

Reports -> New Report

NO.18 You are deploying TLS support for real-time Web and SaaS transactions. What are two secure implementation methods in this scenario? (Choose two.)

Bypass TLS 1.3 because it is not widely adopted.

Downgrade to TLS 1.2 whenever possible.

Support TLS 1.2 only when 1.3 is not supported by the server.

Require TLS 1.3 for every server that accepts it.

NO.19 Which two statements describe a website categorized as a domain generated algorithm (DGA)? (Choose two.)

The website is used for domain registration.

The domain contains malicious algorithms.

The website is used to hide a command-and-control server.

The domain was created by a program.

NO.20 What are two characteristics of Netskope’s Private Access Solution? (Choose two.)

It provides protection for private applications.

It acts as a cloud-based firewall.

It requires on-premises hardware.

It provides access to private applications.

NO.21 You want to set up a Netskope API connection to Box.
What two actions must be completed to enable this connection? (Choose two.)

Install the Box desktop sync client.

Authorize the Netskope application in Box.

Integrate Box with the corporate IdP.

Configure Box in SaaS API Data protection.

NO.22 You want to block access to sites that use self-signed certificates. Which statement is true in this scenario?

Certificate-related settings apply globally to the entire customer tenant.

Certificate-related settings apply to each individual steering configuration level.

Certificate-related settings apply to each individual client configuration level.

Self-signed certificates must be changed to a publicly trusted CA signed certificate.

NO.23 You need to create a service request ticket for a client-related issue using the Netskope client Ul. In this scenario, you generate the client logs by right-clicking on the system tray icon and choosing

Save logs

Configuration

Troubleshoot

Help

NO.24 Which two technologies form a part of Netskope’s Threat Protection module? (Choose two.)

log parser

DLP

sandbox

heuristics

NO.25 What is the limitation of using a legacy proxy compared to Netskope’s solution?

Netskope architecture requires on-premises components.

Legacy solutions offer higher performance and scalability for corporate and remote users.

Legacy on-premises solutions fail to provide protection for traffic from on-premises users.

To enforce policies, traffic needs to traverse back through a customer’s on-premises security stack.

NO.26 Exhibit

A user is connected to a cloud application through Netskope’s proxy.
In this scenario, what information is available at Skope IT? (Choose three.)

username. device location

destination IP. OS patch version

account instance, URL category

user activity, cloud app risk rating

file version, shared folder

NO.27 Which two common security frameworks are used today to assess and validate a vendor’s security practices? (Choose two.)

Data Science Council of America

Building Security in Maturity Model

ISO 27001

NIST Cybersecurity Framework

NO.28 What are two uses for deploying a Netskope Virtual Appliance? (Choose two.)

as an endpoint for Netskope Private Access (NPA)

as a local reverse-proxy to secure a SaaS application

as a log parser to discover in-use cloud applications

as a Secure Forwarder to steer traffic

NO.29 You need to block all users from uploading data files into risky collaboration applications. Which element must you configure within Netskope’s CASB to accomplish this task?

DLP Rule

real-time policy

DLP Profile

block notification

NO.30 Which two cloud security and infrastructure enablement technologies does Secure Access Service Edge (SASE) combine into its unified platform? (Choose two.)

Distributed Denial of Service Protection (DDoS)

Zero Trust Network Access (ZTNA)

Cloud Access Security Broker (CASB)

Unified Threat Management (UTM)

NO.31 Refer to the exhibit.

Click the Exhibit button.
Referring to the exhibit, which statement accurately describes the difference between Source IP (Egress) and Source IP (User) address?

Source IP (Egress) is the IP address of the destination Web server while Source IP (User) is the IP address assigned to your network.

Source IP (Egress) is the IP address assigned to the endpoint host IP address while Source IP (User) is the public IP address of your Internet edge router.

You must always leave the source IP fields blank and configure the user identity as a source criteria.

Source IP (Egress) is the public IP address of your Internet edge router while Source IP (User) is the address assigned to the endpoint.

NO.32 Which three technologies describe the primary cloud service models as defined by the National Institute of Standards and Technology (NIST)? (Choose three.)

Cloud Service Provider (CSP)

Identity as a Service (IDaaS)

Platform as a Service (PaaS)

Software as a Service (SaaS)

Infrastructure as a Service (laaS)

The three technologies that describe the primary cloud service models as defined by the National Institute of Standards and Technology (NIST) are Platform as a Service (PaaS), Software as a Service (SaaS), and Infrastructure as a Service (IaaS). These service models are based on the type of computing capability that is provided by the cloud provider to the cloud consumer over a network. According to NIST, these service models have the following definitions:
Platform as a Service (PaaS): The capability provided to the consumer is to deploy onto the cloud infrastructure consumer-created or acquired applications created using programming languages, libraries, services, and tools supported by the provider. The consumer does not manage or control the underlying cloud infrastructure including network, servers, operating systems, or storage, but has control over the deployed applications and possibly configuration settings for the application-hosting environment.
Software as a Service (SaaS): The capability provided to the consumer is to use the provider’s applications running on a cloud infrastructure. The applications are accessible from various client devices through either a thin client interface, such as a web browser (e.g., web-based email), or a program interface. The consumer does not manage or control the underlying cloud infrastructure including network, servers, operating systems, storage, or even individual application capabilities, with the possible exception of limited user-specific application configuration settings.
Infrastructure as a Service (IaaS): The capability provided to the consumer is to provision processing, storage, networks, and other fundamental computing resources where the consumer is able to deploy and run arbitrary software, which can include operating systems and applications. The consumer does not manage or control the underlying cloud infrastructure but has control over operating systems, storage, and deployed applications; and possibly limited control of select networking components (e.g., host firewalls).

NO.33 There is a DLP violation on a file in your sanctioned Google Drive instance. The file is in a deleted state. You need to locate information pertaining to this DLP violation using Netskope. In this scenario, which statement is correct?

You can find DLP violations under Forensic profiles.

DLP incidents for a file are not visible when the file is deleted.

You can find DLP violations under the Incidents dashboard.

You must create a forensic profile so that an incident is created.

NO.34 You are working with traffic from applications with pinned certificates. In this scenario, which statement is correct?

An exception should be added to the steering configuration.

The domains used by certificate-pinned applications should be added to the authentication bypass list.

Traffic with pinned certificates should be blocked.

The domains used by applications with pinned certificates should be allowed in an inline policy.

Leave a Reply Cancel reply