nerdexam
Netskope

NSK101 · Question #89

The Netskope deployment for your organization is deployed in CASB-only mode. You want to view dropbox.com traffic but do not see it when using SkopeIT. In this scenario, what are two reasons for…

The correct answer is A. The Dropbox Web application is certificate pinned and cannot be steered to the Netskope tenant. B. The Dropbox domains have not been configured to steer to the Netskope tenant. In a CASB-only deployment of Netskope, there could be several reasons why Dropbox.com traffic is not visible in SkopeIT: Certificate Pinning: The Dropbox Web application might be using certificate pinning, which means it only accepts specific certificates for its connections…

Network Configuration and Traffic Steering

Question

The Netskope deployment for your organization is deployed in CASB-only mode. You want to view dropbox.com traffic but do not see it when using SkopeIT. In this scenario, what are two reasons for this problem? (Choose two.)

Options

  • AThe Dropbox Web application is certificate pinned and cannot be steered to the Netskope tenant.
  • BThe Dropbox domains have not been configured to steer to the Netskope tenant.
  • CThe Dropbox desktop application is certificate pinned and cannot be steered to the Netskope
  • DThe Dropbox domains are configured to steer to the Netskope tenant.

How the community answered

(33 responses)
  • A
    79% (26)
  • C
    9% (3)
  • D
    12% (4)

Explanation

In a CASB-only deployment of Netskope, there could be several reasons why Dropbox.com traffic is not visible in SkopeIT: Certificate Pinning: The Dropbox Web application might be using certificate pinning, which means it only accepts specific certificates for its connections. This can prevent the traffic from being steered to the Netskope tenant because the proxy's certificate might not match the pinned certificate . Configuration of Dropbox Domains: If the Dropbox domains are not properly configured to be steered to the Netskope tenant, then the traffic will bypass the Netskope inspection and will not be visible in SkopeIT. Ensuring that the domains are configured correctly is essential for the traffic to be captured and analyzed by

Topics

#CASB mode#certificate pinning#traffic steering#SkopeIT visibility

Community Discussion

No community discussion yet for this question.

Full NSK101 Practice