nerdexam
Netskope

NSK101 · Question #37

When would an administrator need to use a tombstone file?

The correct answer is C. You use a tombstone file when the policy causes a file to be moved to quarantine. A tombstone file is a placeholder file that replaces the original file when it is moved to quarantine by a Netskope policy. The tombstone file contains information about the original file, such as its name, size, type, owner, and the reason why it was quarantined. The tombstone…

Advanced Data Loss Prevention (DLP) and Compliance

Question

When would an administrator need to use a tombstone file?

Options

  • AYou use a tombstone file when a policy causes a file download to be blocked.
  • BYou use a tombstone file when a policy causes a publicly shared file to be encrypted.
  • CYou use a tombstone file when the policy causes a file to be moved to quarantine.
  • DYou use a tombstone file when a policy causes a file to be moved to legal hold.

How the community answered

(29 responses)
  • A
    10% (3)
  • B
    3% (1)
  • C
    79% (23)
  • D
    7% (2)

Explanation

A tombstone file is a placeholder file that replaces the original file when it is moved to quarantine by a Netskope policy. The tombstone file contains information about the original file, such as its name, size, type, owner, and the reason why it was quarantined. The tombstone file also provides a link to the Netskope UI where the administrator or the file owner can view more details about the incident and take appropriate actions, such as restoring or deleting the file. The purpose of using a tombstone file is to preserve the metadata and location of the original file, as well as to notify the users about the quarantine action and how to access the file if needed.

Topics

#tombstone file#quarantine#DLP policy#file remediation

Community Discussion

No community discussion yet for this question.

Full NSK101 Practice