NSK101 Exam Questions
99 real NSK101 exam questions with expert-verified answers and explanations. Page 1 of 2.
- Question #1Netskope Platform Fundamentals and Architecture
Which three security controls are offered by the Netskope Cloud platform? (Choose three.)
DLPCSPMthreat protectionplatform capabilities - Question #2Cloud Access Security Broker (CASB) Policy Management
You want to use an out-of-band API connection into your sanctioned Microsoft 365 OneDrive for Business application to find sensitive content, enforce near real-time policy controls...
SaaS API-enabled protectionOneDriveout-of-band inspectionquarantine - Question #3Troubleshooting and Maintenance
You need to create a service request ticket for a client-related issue using the Netskope client Ul. In this scenario, you generate the client logs by right-clicking on the system...
Netskope clientlog collectionsystem traytroubleshooting UI - Question #4Netskope Platform Fundamentals and Architecture
Which two cloud security and infrastructure enablement technologies does Secure Access Service Edge (SASE) combine into its unified platform? (Choose two.)
SASEZTNACASBframework components - Question #5Reporting, Logging, and Analytics
In the Skope IT interface, which two event tables would be used to label a cloud application instance? (Choose two.)
Skope ITevent tablesapp instance labelingpage events - Question #6Cloud Access Security Broker (CASB) Policy Management
Your department is asked to report on GDPR data publicly exposed in Microsoft 365, Salesforce. and Slack-sanctioned cloud applications. Which deployment model would you use to disc...
API-enabled protectionGDPRdata discoverysanctioned apps - Question #7Threat Protection and Anomaly Detection
Which two technologies form a part of Netskope's Threat Protection module? (Choose two.)
sandboxheuristicsthreat protectionmalware detection - Question #8Troubleshooting and Maintenance
You just deployed the Netskope client in Web mode and several users mention that their messenger application is no longer working. Although you have a specific real-time policy tha...
SSL decryption bypassproprietary encryptionsteering exceptionNetskope client Web mode - Question #9Netskope Security Service Edge (SSE) Overview and Deployment
You consume application infrastructure (middleware) capabilities by a third-party provider. What is the cloud service model that you are using in this scenario?
cloud service modelsPaaSmiddlewareIaaS - Question #10Network Configuration and Traffic Steering
You are deploying TLS support for real-time Web and SaaS transactions. What are two secure implementation methods in this scenario? (Choose two.)
TLS 1.3TLS 1.2SSL/TLS inspectionsecure web gateway - Question #11Netskope Security Service Edge (SSE) Overview and Deployment
What correctly defines the Zero Trust security model?
zero trustleast privilegesecurity model - Question #12Monitoring, Reporting, and Audit Capabilities
A user is connected to a cloud application through Netskope's proxy. In this scenario, what information is available at Skope IT? (Choose three.)
Skope ITproxy visibilitycloud app activityuser context - Question #13Implementing and Managing Cloud Security Policies
What is a benefit that Netskope instance awareness provides?
instance awarenessCASBpersonal vs corporate instancedata protection - Question #14Platform Troubleshooting and Optimization
According to Netskope. what are two preferred methods to report a URL miscategorization? (Choose two.)
URL categorizationURL lookupmiscategorization reporting - Question #15Network Configuration and Traffic Steering
You want to deploy Netskope's zero trust network access (ZTNA) solution, NPA. In this scenario, which action would you perform to accomplish this task?
NPAZTNAprivate appssteering configuration - Question #16Netskope Security Service Edge (SSE) Overview and Deployment
What is the limitation of using a legacy proxy compared to Netskope's solution?
legacy proxytraffic hairpinningcloud architectureSSE - Question #17Implementing and Managing Cloud Security Policies
You are creating a real-time policy for cloud applications. In addition to users, groups, and organizational units, which two source criteria would support this scenario? (Choose t...
real-time policyaccess methoddevice classificationpolicy criteria - Question #18Netskope Security Service Edge (SSE) Overview and Deployment
What are two reasons why legacy solutions, such as on-premises firewalls and proxies, fail to secure the data and data access compared to Netskope Secure Web Gateway? (Choose two.)
legacy solutionsSWGremote userscloud security - Question #19Advanced Data Loss Prevention (DLP) and Compliance
There is a DLP violation on a file in your sanctioned Google Drive instance. The file is in a deleted state. You need to locate information pertaining to this DLP violation using N...
DLP incidentsGoogle Driveincident dashboarddeleted files - Question #20Implementing and Managing Cloud Security Policies
What are two CASB inline interception use cases? (Choose two.)
CASB inlinefile upload blockinguser alertsreal-time protection - Question #21Implementing and Managing Cloud Security Policies
You want to take into account some recent adjustments to CCI scoring that were made in your Netskope tenant. In this scenario, which two CCI aspects in the Ul would be used in a re...
CCI scoringCCLApp ScoreApp Tag - Question #22Network Configuration and Traffic Steering
You are working with traffic from applications with pinned certificates. In this scenario, which statement is correct?
certificate pinningSSL inspectionsteering exceptionstraffic bypass - Question #23Network Configuration and Traffic Steering
Which two traffic steering configurations are supported by Netskope? (Choose two.)
traffic steeringcloud applicationsweb trafficsteering configuration - Question #24Netskope Security Service Edge (SSE) Overview and Deployment
Which three technologies describe the primary cloud service models as defined by the National Institute of Standards and Technology (NIST)? (Choose three.)
NISTcloud service modelsIaaSPaaS - Question #25Netskope Security Service Edge (SSE) Overview and Deployment
Which two controls are covered by Netskope's security platform? (Choose two.)
ZTNACASBNetskope platformsecurity controls - Question #26Advanced Data Loss Prevention (DLP) and Compliance
Which two statements are correct about DLP Incidents in the Netskope platform? (Choose two.)
DLP incidentsDLP violationsDLP rulesincident management - Question #27Real-time Threat Protection and Incident Response
Which two statements describe a website categorized as a domain generated algorithm (DGA)? (Choose two.)
DGAcommand-and-controlmalwarethreat detection - Question #28Implementing and Managing Cloud Security Policies
Which two functions are available for both inline and API protection? (Choose two.)
inline protectionAPI protectionDLPthreat protection - Question #29Netskope Security Service Edge (SSE) Overview and Deployment
A customer wants to detect misconfigurations in their AWS cloud instances. In this scenario, which Netskope feature would you recommend to the customer?
CSPMcloud misconfigurationAWS securitycloud posture management - Question #30Netskope Security Service Edge (SSE) Overview and Deployment
Which two use cases would be considered examples of Shadow IT within an organization? (Choose two.)
Shadow ITunsanctioned applicationscloud app discoveryCASB - Question #31Network Configuration and Traffic Steering
In which scenario would you use a SAML reverse proxy?
SAML reverse proxyidentity federationIdPinline inspection - Question #32Monitoring, Reporting, and Audit Capabilities
You need to provide a quick view under the Skope IT Applications page showing only risky shadow IT cloud applications being used. In this scenario, which two filter combinations wo...
Skope ITCCL scoringshadow IT discoveryapplication filtering - Question #33Real-time Threat Protection and Incident Response
You want to prevent Man-in-the-Middle (MITM) attacks on an encrypted website or application. In this scenario, which method would you use?
MITM attackscertificate pinningSSL/TLS securityencrypted traffic - Question #34Advanced Data Loss Prevention (DLP) and Compliance
Which portion of the interface shown in the exhibit allows an administrator to set severity, assign ownership, track progress, and perform forensic analysis with excerpts of violat...
DLP incidentsforensic analysisincident managementNetskope UI - Question #35Netskope Security Service Edge (SSE) Overview and Deployment
What are two primary advantages of Netskope's Secure Access Service Edge (SASE) architecture? (Choose two.
SASE architecturecloud-native securitymanagement consoleSSE benefits - Question #36Implementing and Managing Cloud Security Policies
How do you provision users to your customer's Netskope tenant? (Choose two.)
user provisioningAD ConnectorDirectory ImporterSCIM - Question #37Advanced Data Loss Prevention (DLP) and Compliance
When would an administrator need to use a tombstone file?
tombstone filequarantineDLP policyfile remediation - Question #38Platform Troubleshooting and Optimization
You have an issue with the Netskope client connecting to the tenant. In this scenario, what are two ways to collect the logs from the client machine? (Choose two.)
Netskope client logsnsdiaglog collectionclient troubleshooting - Question #39Real-time Threat Protection and Incident Response
You investigate a suspected malware incident and confirm that it was a false alarm.
malware incidentfile hashfile filterfalse positive management - Question #40Implementing and Managing Cloud Security Policies
Which two common security frameworks are used today to assess and validate a vendor's security practices? (Choose two.)
ISO 27001BSIMMsecurity frameworksvendor assessment - Question #41Platform Troubleshooting and Optimization
You have applied a DLP Profile to block all Personally Identifiable Information data uploads to Microsoft 365 OneDrive. DLP Alerts are not displayed and no OneDrive-related activit...
DLP troubleshootingsteering configuration exceptionsSSL decryption policytraffic visibility - Question #42Implementing and Managing Cloud Security Policies
A customer changes CCI scoring from the default objective score to another score. In this scenario, what would be a valid reason for making this change?
CCI scoringcloud confidence indexrisk weightingSaaS evaluation - Question #43Advanced Data Loss Prevention (DLP) and Compliance
What are two use cases for Netskope's DLP solution? (Choose two.)
DLP use casesunintentional data movementregulatory compliancesensitive data protection - Question #44Network Configuration and Traffic Steering
What are two uses for deploying a Netskope Virtual Appliance? (Choose two.)
virtual applianceNetskope Private AccessSecure Forwardertraffic steering - Question #45Advanced Data Loss Prevention (DLP) and Compliance
You are working with a large retail chain and have concerns about their customer data. You want to protect customer credit card data so that it is never exposed in transit or at re...
PCI-DSSregulatory compliancecredit card datadata protection standards - Question #46Implementing and Managing Cloud Security Policies
You need to block all users from uploading data files into risky collaboration applications. Which element must you configure within Netskope's CASB to accomplish this task?
CASBreal-time policydata upload blockingapplication control - Question #47Network Configuration and Traffic Steering
Referring to the exhibit, which statement accurately describes the difference between Source IP (Egress) and Source IP (User) address?
source IP egresssource IP usernetwork addressingtraffic inspection - Question #48Netskope Security Service Edge (SSE) Overview and Deployment
Which three statements are correct about Netskope's NewEdge Security Cloud Network Infrastructure? (Choose three.)
NewEdge networkprivate security clouddirect peeringinfrastructure architecture - Question #49Netskope Security Service Edge (SSE) Overview and Deployment
What are two pillars of CASB? (Choose two.)
CASBvisibilitycompliancecloud security fundamentals - Question #50Implementing and Managing Cloud Security Policies
You want to set up a Netskope API connection to Box. What two actions must be completed to enable this connection? (Choose two.)
CASB API connectorBox integrationSaaS API Data ProtectionAPI authorization