nerdexam
Netskope

NSK101 · Question #55

A customer asks you to create several real-time policies. Policy A generates alerts when any user downloads, uploads, or shares files on a cloud storage application. Policy B blocks users from…

The correct answer is B. Policy B is implemented before policy A. In this scenario, policy B is more restrictive than policy A, as it blocks users from downloading files from any OS other than Mac or Windows for cloud storage, while policy A only generates alerts when any user downloads, uploads, or shares files on a cloud storage…

Implementing and Managing Cloud Security Policies

Question

A customer asks you to create several real-time policies. Policy A generates alerts when any user downloads, uploads, or shares files on a cloud storage application. Policy B blocks users from downloading files from any operating system (OS) other than Mac or Windows for cloud storage. In this case, policy A is least restrictive and policy B is more restrictive. Which statement is correct in this scenario?

Options

  • APolicy A is implemented before policy B.
  • BPolicy B is implemented before policy A.
  • CThe policy order is not important; policies are independent of each other.
  • DThese two policies would actually not work together.

How the community answered

(47 responses)
  • A
    6% (3)
  • B
    83% (39)
  • C
    9% (4)
  • D
    2% (1)

Explanation

In this scenario, policy B is more restrictive than policy A, as it blocks users from downloading files from any OS other than Mac or Windows for cloud storage, while policy A only generates alerts when any user downloads, uploads, or shares files on a cloud storage application. Therefore, policy B should be implemented before policy A, as the policy order determines the order of evaluation and enforcement of the policies. If policy A is implemented before policy B, then policy B will never be triggered, as policy A will match all the download activities for cloud storage and generate alerts. The policy order is important; policies are not independent of each other, as they may have overlapping or conflicting conditions and actions. These two policies would actually work together, as long as they are ordered correctly.

Topics

#policy ordering#real-time protection policies#cloud storage#policy precedence

Community Discussion

No community discussion yet for this question.

Full NSK101 Practice