NSK200 by Netskope Actual Free Exam Q&As

Question 1

Which statement describes a requirement for deploying a Netskope Private Application (NPA) Publisher?

A. The publisher must be deployed on the network where the private application will be accessed. B. The publisher ' s name must match the name of the application process that it will access. C. The publisher must be deployed in a private data center. D. The publisher must be deployed in a public cloud environment, such as AWS.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 2

While most Web and SaaS traffic is decrypted for inspection, you are asked to prevent a certain host on the network from SSL decryption for privacy purposes.

A. Create a Source Network Location for a Do Not Decrypt SSL policy. B. Create a steering exception for the host. C. Create a Real-time Protection policy, select the host, and choose to block SSL decryption. D. Add the host to the certificate-pinned application list.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 3

You are using Skope IT to analyze and correlate a security incident. You are seeing too many events generated by API policies. You want to filter for logs generated by the Netskope client only.

A. Use the access_method filter and select Client from the dropdown menu. B. Use the access_method filter and select Tunnel from the dropdown menu. C. Use the access_method filter and select Logs from the dropdown menu. D. Use query mode and use access_method neq Client.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 4

Review the exhibit.

You want to create a custom URL category to apply a secure Web gateway policy combining your own list of URLs and Netskope predefined categories.
In this scenario, which task must be completed?

A. Add the URL list to a Custom category. B. Add the URL list to a Real-time Protection policy. C. Add the URL list to the Client configuration. D. Add the URL list to a Steering configuration.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 5

Netskope support advised you to enable DTLS for belter performance. You added firewall rules to allow UDP port 443 traffic. These settings are part of which configuration element when enabled in the Netskope tenant?

A. Real-time Protection policies B. SSL decryption policies C. client configuration D. steering configuration

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 6

Review the exhibit.
add log-upload syslogng parserconfig set log-upload syslogng parserconfig 0 logsource < log-source > You are asked to deploy a virtual appliance OPLP to accept syslog messages directly from the enterprise Palo Alto Networks firewall. You believe that you have configured the OPLP to accept the firewall logs, yet they are not appearing in Risk Insights. Referring to the exhibit, which parser name would be required to complete the new configuration?

A. sfwder B. custom-csv C. squid D. panw-syslog

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 7

Your team is asked to investigate ten Netskope DLP incidents. You want to assign these incidents among different team members.

A. Use your ticketing tool. B. Use the DLP Incident workflow. C. Use the Forensic Incident workflow. D. Use the Quarantine Incident workflow.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 8

Which statement describes how Netskope ' s REST API, v1 and v2, handles authentication?

A. Both REST API v1 and v2 require the use of tokens to make calls to the API B. REST API v2 requires the use of a token to make calls to the API. while API vl does not. C. REST API v1 requires the use of a token to make calls to the API. while API v2 does not. D. Neither REST API v1 nor v2 require the use of tokens.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 9

After setting up the Netskope client in an explicit proxy environment, the Netskope client establishes the SSL tunnel between the client and the Netskope gateway. The client cannot connect directly through the default gateway to establish the SSL tunnel. In this scenario, what needs to be done for the client to connect to the Netskope gateway?

A. Set up an HTTP proxy server to tunnel the SSL connection to the Netskope gateway. B. Configure the PAC files of the system ' s proxy settings to open a connection to the explicit proxy server. C. Allow outbound domains and port 443 for the proxy configuration. D. Install proxy decryption certificates on the device.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 10

Your company wants to know if there has been any unusual user activity. In the UI, you go to Skope IT - > Alerts.
Which two types of alerts would you filter to find this information? (Choose two.)

A. Alert type = policy B. Alert type = anomaly C. Alert type = uba D. Alert type = malware

Discussion 0

Correct Answer: B,C Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Netskope Certified Cloud Security Integrator (NCCSI) - NSK200 Exam Practice Test