NSK100 Exam Questions
70 real NSK100 exam questions with expert-verified answers and explanations. Page 1 of 2.
- Question #1Security operations
Referring to the exhibit. Which portion of the interface shown in the exhibit allows an administrator to set severity, assign ownership, track progress, and perform forensic analys...
Netskope UIDLP incidentsforensic analysisalerts - Question #2Cloud Security and SD-WAN
What are two primary advantages of Netskope's Secure Access Service Edge (SASE) architecture? (Choose two.)
SASENetskopecloud-nativemanagement console - Question #3Cloud Security and SD-WAN
Referring to the exhibit, which statement accurately describes the difference between Source IP (Egress) and Source IP (User) address?
Netskopesource IPegress IPuser IP - Question #4Cloud Security and SD-WAN
Which three statements are correct about Netskope's NewEdge Security Cloud Network Infrastructure? (Choose three.)
NewEdgeNetskopeprivate cloud networkdirect peering - Question #5Cloud Security and SD-WAN
What are two pillars of CASB? (Choose two.)
CASBvisibilitycompliancecloud security - Question #6Cloud Security and SD-WAN
You want to set up a Netskope API connection to Box. What two actions must be completed to enable this connection? (Choose two.)
Netskope APIBox integrationSaaS API protectionAPI-enabled protection - Question #7Cloud Security and SD-WAN
When using an out-of-band API connection with your sanctioned cloud service, what are two capabilities available to the administrator? (Choose two.)
out-of-band APICASBquarantinesensitive data discovery - Question #8Web Application Security and Email Security
You want to block access to sites that use self-signed certificates. Which statement is true in this scenario?
SSL inspectionself-signed certificatessteering configurationNetskope - Question #9Security Operations and Automation
How do you provision users to your customer's Netskope tenant? (Choose two.)
user provisioningAD ConnectorSCIMDirectory Importer - Question #10Security operations
You have applied a DLP Profile to block all Personally Identifiable Information data uploads to Microsoft 365 OneDrive. DLP Alerts are not displayed and no OneDrive-related activit...
DLP troubleshootingsteering configurationdecryption policyOneDrive - Question #11Cloud Security and SD-WAN
A customer changes CCI scoring from the default objective score to another score. In this scenario, what would be a valid reason for making this change?
CCI scoringcloud confidence indexSaaS risk weightingNetskope - Question #12Security Solutions
What are two use cases for Netskope's DLP solution? (Choose two.)
DLPdata loss preventioncompliancedata movement - Question #13Cloud Security and SD-WAN
What are two uses for deploying a Netskope Virtual Appliance? (Choose two.)
virtual applianceNPASecure Forwardertraffic steering - Question #14Security Solutions
You are working with a large retail chain and have concerns about their customer data. You want to protect customer credit card data so that it is never exposed in transit or at re...
PCI-DSScompliancecredit card dataregulatory standard - Question #15Cloud Security and SD-WAN
You need to block all users from uploading data files into risky collaboration applications. Which element must you configure within Netskope's CASB to accomplish this task?
CASBreal-time policydata upload blockingcollaboration apps - Question #16Cloud Security and SD-WAN
You want to use an out-of-band API connection into your sanctioned Microsoft 365 OneDrive for Business application to find sensitive content, enforce near real-time policy controls...
SaaS API-enabled protectionOneDriveout-of-band APINetskope - Question #17Security operations
You need to create a service request ticket for a client-related issue using the Netskope client Ul. In this scenario, you generate the client logs by right-clicking on the system...
Netskope clientclient logstroubleshootingsystem tray - Question #18Cloud Security and SD-WAN
What are two characteristics of Netskope's Private Access Solution? (Choose two.)
NPAprivate accessZTNANetskope - Question #19Threat Protection and Anomaly Detection
You are required to mitigate malicious scripts from being downloaded into your corporate devices every time a user goes to a website. Users need to access websites from a variety o...
Remote Browser Isolationmalware blockingweb categoriesthreat mitigation - Question #20Netskope Platform Fundamentals and Architecture
Which three security controls are offered by the Netskope Cloud platform? (Choose three.)
DLPCSPMthreat protectionplatform capabilities - Question #21Cloud Access Security Broker (CASB) Policy Management
Why would you want to define an App Instance?
app instancetenant differentiationpersonal vs enterpriseCASB - Question #22Deployment and Configuration of Netskope Components
You want to enable Netskope to gain visibility into your users' cloud application activities in an inline mode. In this scenario, which two deployment methods would match your inli...
forward proxyreverse proxyinline modedeployment methods - Question #23Netskope Platform Fundamentals and Architecture
Which two cloud security and infrastructure enablement technologies does Secure Access Service Edge (SASE) combine into its unified platform? (Choose two.)
SASEZTNACASBcloud security architecture - Question #24Reporting, Logging, and Analytics
In the Skope IT interface, which two event tables would be used to label a cloud application instance? (Choose two.)
Skope ITpage eventsapplication eventsinstance labeling - Question #25Deployment and Configuration of Netskope Components
Your department is asked to report on GDPR data publicly exposed in Microsoft 365, Salesforce. and Slack-sanctioned cloud applications. Which deployment model would you use to disc...
API-enabled protectionGDPRdata discoverysanctioned apps - Question #26Threat Protection and Anomaly Detection
Which two technologies form a part of Netskope's Threat Protection module? (Choose two.)
sandboxheuristicsthreat protectionmalware detection - Question #27Troubleshooting and Maintenance
You just deployed the Netskope client in Web mode and several users mention that their messenger application is no longer working. Although you have a specific real-time policy tha...
SSL decryption bypassproprietary encryptionsteering configurationclient troubleshooting - Question #28Netskope Platform Fundamentals and Architecture
You consume application infrastructure (middleware) capabilities by a third-party provider. What is the cloud service model that you are using in this scenario?
PaaScloud service modelsmiddlewareIaaS vs PaaS vs SaaS - Question #29Deployment and Configuration of Netskope Components
You are deploying TLS support for real-time Web and SaaS transactions. What are two secure implementation methods in this scenario? (Choose two.)
TLS 1.3TLS 1.2SSL/TLS best practicessecure deployment - Question #30Netskope Platform Fundamentals and Architecture
What correctly defines the Zero Trust security model?
Zero Trustleast privilegesecurity modelaccess control - Question #31Reporting, Logging, and Analytics
Referring to the exhibit. A user is connected to a cloud application through Netskope's proxy. In this scenario, what information is available at Skope IT? (Choose three.)
Skope ITproxy visibilityuser activitycloud app metadata - Question #32Cloud Access Security Broker (CASB) Policy Management
What is a benefit that Netskope instance awareness provides?
instance awarenesstenant differentiationGoogle Drivepersonal vs corporate - Question #33Data Loss Prevention (DLP) Implementation and Management
When would an administrator need to use a tombstone file?
tombstone filequarantineDLP remediation actionsfile policy - Question #34Troubleshooting and Maintenance
You have an issue with the Netskope client connecting to the tenant. In this scenario, what are two ways to collect the logs from the client machine? (Choose two.)
client logsnsdiagdiagnosticstroubleshooting - Question #35Data Loss Prevention (DLP) Implementation and Management
A company wants to prevent employees from uploading sensitive customer data to personal cloud storage applications while allowing access to approved corporate apps. Which Netskope...
DLP policydata upload preventionpersonal cloud storageinstance awareness - Question #36Deployment and Configuration of Netskope Components
An organization wants visibility into cloud applications being used without deploying any endpoint agents. Which Netskope feature best meets this requirement?
log-based discoveryagentless deploymentcloud app visibilityshadow IT - Question #37Deployment and Configuration of Netskope Components
A security team needs to inspect traffic from unmanaged devices accessing Microsoft 365 in real time. Which deployment method should be used?
reverse proxyunmanaged devicesBYODreal-time inspection - Question #38Cloud Access Security Broker (CASB) Policy Management
A company wants to scan files already stored in Google Drive for sensitive data and malware. Which Netskope capability should be enabled?
API-based protectionGoogle Drivedata at rest scanningsanctioned app security - Question #39Threat Protection and Anomaly Detection
A user is allowed to access a cloud application but should be prevented from downloading files containing malware. Which Netskope feature addresses this requirement?
malware protectionsandboxthreat detectionCASB inline - Question #40Threat Protection and Anomaly Detection
You investigate a suspected malware incident and confirm that it was a false alarm.
malware false positivefile hashfile filterincident response - Question #41Netskope Platform Fundamentals and Architecture
Which two common security frameworks are used today to assess and validate a vendor's security practices? (Choose two.)
security frameworksISO 27001BSIMMvendor assessment - Question #42Cloud Access Security Broker (CASB) Policy Management
A customer asks you to create several real-time policies. Policy A generates alerts when any user downloads, uploads, or shares files on a cloud storage application. Policy B block...
real-time policypolicy orderingpolicy precedencecloud storage - Question #43Troubleshooting and Maintenance
A company is attempting to steer traffic to Netskope using GRE tunnels. They notice that after the initial configuration, users cannot access external websites from their browsers....
GRE tunnelstraffic steeringtroubleshootingtunnel configuration - Question #44Netskope Platform Fundamentals and Architecture
What are two fundamental differences between the inline and API implementation of the Netskope platform? (Choose two.)
inline vs APIsanctioned appsunsanctioned appsCASB deployment - Question #45Reporting, Logging, and Analytics
Your company asks you to obtain a detailed list of all events from the last 24 hours for a specific user. In this scenario, what are two methods to accomplish this task? (Choose tw...
event loggingSkope ITREST APIuser activity - Question #46Troubleshooting and Maintenance
According to Netskope. what are two preferred methods to report a URL miscategorization? (Choose two.)
URL miscategorizationURL lookupsupport process - Question #47Deployment and Configuration of Netskope Components
You want to deploy Netskope's zero trust network access (ZTNA) solution, NP
ZTNANPASAMLreverse proxy - Question #48Netskope Platform Fundamentals and Architecture
What is the limitation of using a legacy proxy compared to Netskope's solution?
legacy proxycloud architecturetraffic hairpinningNetskope SWG - Question #49Cloud Access Security Broker (CASB) Policy Management
You are creating a real-time policy for cloud applications. In addition to users, groups, and organizational units, which two source criteria would support this scenario? (Choose t...
real-time policysource criteriaaccess methoddevice classification - Question #50Netskope Platform Fundamentals and Architecture
What are two reasons why legacy solutions, such as on-premises firewalls and proxies, fail to secure the data and data access compared to Netskope Secure Web Gateway? (Choose two.)
legacy solutionsSWGdata locationremote users