QUESTION: 33

You are creating a real-time policy for cloud applications.

In addition to users, groups, and organizational units, which two source criteria would support this scenario? (Choose two.)

protocol version
access method
browser version
device classification

Answer(s): B,D

Explanation:

When creating a real-time policy for cloud applications, you can use access method and device classification as source criteria, in addition to users, groups, and organizational units. Access method refers to how the user accesses the cloud application, such as browser, sync client, mobile app, etc. Device classification refers to the type of device used by the user, such as managed or unmanaged, Windows or Mac, etc. These criteria can help you define granular policies based on different scenarios and risks.

Reference:

[Creating Real-Time Policies for Cloud Applications]

Reveal Solution Next Question

QUESTION: 34

What are two reasons why legacy solutions, such as on-premises firewalls and proxies, fail to secure the data and data access compared to Netskope Secure Web Gateway? (Choose two.)

Legacy solutions are unable to see the user who is trying to access the application.
The applications where the data resides are no longer in one central location.
Legacy solutions do not meet compliance standards.
The users accessing this data are not in one central place.

Answer(s): B,D

Explanation:

Legacy solutions, such as on-premises firewalls and proxies, fail to secure the data and data access compared to Netskope Secure Web Gateway because they are designed for a perimeter-based security model, where the applications and the users are both within the corporate network. However, with the rise of cloud computing and remote work, this model is no longer valid. The applications where the data resides are no longer in one central location, but distributed across multiple cloud services and regions. The users accessing this data are not in one central place, but working from anywhere, on any device. Legacy solutions cannot provide adequate visibility and control over this dynamic and complex environment, resulting in security gaps and performance issues. Netskope Secure Web Gateway, on the other hand, leverages a cloud-native architecture that provides high-performance and scalable inspection of traffic from any location and device, as well as granular policies and advanced threat and data protection for web and cloud applications.

Reference:

Netskope Architecture OverviewNetskope Next Gen SWG

Reveal Solution Next Question

QUESTION: 35

There is a DLP violation on a file in your sanctioned Google Drive instance. The file is in a deleted state. You need to locate information pertaining to this DLP violation using Netskope. In this scenario, which statement is correct?

You can find DLP violations under Forensic profiles.
DLP incidents for a file are not visible when the file is deleted.
You can find DLP violations under the Incidents dashboard.
You must create a forensic profile so that an incident is created.

Answer(s): C

Explanation:

To locate information pertaining to a DLP violation on a file in your sanctioned Google Drive instance, you can use the Incidents dashboard in Netskope. The Incidents dashboard provides a comprehensive view of all the incidents that have occurred in your cloud environment, such as DLP violations, malware infections, anomalous activities, etc. You can filter the incidents by various criteria, such as app name, incident type, severity, user name, etc. You can also drill down into each incident to see more details, such as file name, file path, file owner, file size, file type, etc. The Incidents dashboard can show DLP violations for files that are in a deleted state, as long as they are still recoverable from the trash bin of the app. If the file is permanently deleted from the app, then the incident will not be visible in the dashboard.

Reference:

Netskope Incidents Dashboard

Reveal Solution Next Question

QUESTION: 36

What are two CASB inline interception use cases? (Choose two.)

blocking file uploads to a personal Box account
running a retroactive scan for data at rest in Google Drive
using the Netskope steering client to provide user alerts when sensitive information is posted in Slack
scanning Dropbox for credit card information

Answer(s): A,C

Explanation:

CASB inline interception use cases are scenarios where you need to apply real-time policies and actions on the traffic between users and cloud applications. For example, you may want to block file uploads to a personal Box account to prevent data leakage or exfiltration. You can use Netskope's inline proxy mode to intercept and inspect the traffic between users and Box, and apply granular policies based on user identity, device type, app instance, file metadata, etc. You can also use Netskope's inline proxy mode to provide user alerts when sensitive information is posted in Slack. For example, you may want to warn users when they share credit card numbers or social security numbers in Slack channels or messages. You can use Netskope's steering client to redirect the traffic between users and Slack to Netskope's inline proxy for inspection and enforcement. You can also use Netskope's DLP engine to detect sensitive data patterns and apply actions such as alerting or blocking.

Reference:

Netskope Inline Proxy ModeNetskope Steering Client [Netskope DLP Engine]

Reveal Solution Next Question

Free NSK101 Exam Braindumps

QUESTION: 33

Explanation:

Reference:

QUESTION: 34

Explanation:

Reference:

QUESTION: 35

Explanation:

Reference:

QUESTION: 36

Explanation:

Reference: