QUESTION: 17

The risk team at your company has determined that traffic from the sales team to a custom Web application should not be inspected by Netskope. All other traffic to the Web application should continue to be inspected. In this scenario, how would you accomplish this task?

Create a Do Not Decrypt Policy using User Group and Domain in the policy page.
Create a Do Not Decrypt Policy using Application in the policy page and a Steering Exception for Group
Create a Do Not Decrypt Policy using Destination IP and Application in the policy page.
Create a Do Not Decrypt Policy using Source IP and Application in the policy page.

Answer(s): A

Explanation:

To prevent traffic from the sales team to a custom Web application from being inspected by Netskope, you need to create a Do Not Decrypt Policy using User Group and Domain in the policy page. A Do Not Decrypt Policy allows you to specify the traffic you want to leave encrypted and not further analyzed by Netskope via the Real-time Protection policies3. You can use the User Group criteria to match the sales team members and the Domain criteria to match the custom Web application. This way, only the traffic from the sales team to the custom Web application will be exempted from decryption, while all other traffic to the Web application will continue to be inspected.

Reveal Solution Next Question

QUESTION: 18

Your organization has a homegrown cloud application. You are required to monitor the activities that users perform on this cloud application such as logins, views, and downloaded files. Unfortunately, it seems Netskope is unable to detect these activities by default.

How would you accomplish this goal?

Enable access to the application with Netskope Private Access.
Ensure that the cloud application is added as a steering exception.
Ensure that the application is added to the SSL decryption policy.
Create a new cloud application definition using the Chrome extension.

Answer(s): D

Explanation:

To monitor the activities that users perform on a homegrown cloud application, you need to create a new cloud application definition using the Chrome extension. The Chrome extension is a tool that allows you to record the traffic and activities of any web-based application and create a custom app definition that can be imported into your Netskope tenant1. This way, you can enable Netskope to detect and analyze the activities of your homegrown cloud application and apply policies accordingly. Therefore, option D is correct and the other options are incorrect.

Reference:

Creating a Cloud App Definition - Netskope Knowledge Portal

Reveal Solution Next Question

QUESTION: 19

You are implementing tenant access security and governance controls for privileged users. You want to start with controls that are natively available within the Netskope Cloud Security Platform and do not require external or third-party integration.

Which three access controls would you use in this scenario? (Choose three.)

IP allowlisting to control access based upon source IP addresses.
Login attempts to set the number of failed attempts before the admin user is locked out of the Ul.
Applying predefined or custom roles to limit the admin's access to only those functions required for their job.
Multi-factor authentication to verify a user's authenticity.
History-based access control based on past security actions.

Answer(s): A,B,C

Explanation:

To implement tenant access security and governance controls for privileged users, you can use the following access controls that are natively available within the Netskope Cloud Security Platform and do not require external or third-party integration:

IP allowlisting to control access based upon source IP addresses. This allows you to specify the IP addresses that are allowed to access your Netskope tenant2. This can prevent unauthorized access from unknown or malicious sources.

Login attempts to set the number of failed attempts before the admin user is locked out of the UI. This allows you to configure how many times an admin can enter an incorrect password before being locked out for a specified period of time3. This can prevent brute-force attacks or password guessing attempts.

Applying predefined or custom roles to limit the admin's access to only those functions required for their job. This allows you to assign different levels of permissions and access rights to different admins based on their roles and responsibilities4. This can enforce the principle of least privilege and reduce the risk of misuse or abuse of admin privileges. Therefore, options A, B, and C are correct and the other options are incorrect.

Reference:

Secure Tenant Configuration and Hardening - Netskope Knowledge Portal, Admin Settings - Netskope Knowledge Portal, Create Roles - Netskope Knowledge Portal

Reveal Solution Next Question

QUESTION: 20

You want to prevent a document stored in Google Drive from being shared externally with a public link.
What would you configure in Netskope to satisfy this requirement?

Threat Protection policy
API Data Protection policy
Real-time Protection policy
Quarantine

Answer(s): B

Explanation:

To prevent a document stored in Google Drive from being shared externally with a public link, you need to configure an API Data Protection policy in Netskope. An API Data Protection policy allows you to discover, classify, and protect data that is already resident in your cloud services, such as Google Drive1. You can create a policy that matches the documents you want to protect based on criteria such as users, content, activity, or DLP profiles. Then, you can choose an action to prevent the documents from being shared externally, such as remove external collaborators, remove public links, or quarantine2. Therefore, option B is correct and the other options are incorrect.

Reference:

API

Data Protection - Netskope Knowledge Portal, Add a Policy for API Data Protection - Netskope Knowledge Portal

Reveal Solution Next Question

Free NSK200 Exam Braindumps (page: 5)

QUESTION: 17

Explanation:

QUESTION: 18

Explanation:

Reference:

QUESTION: 19

Explanation:

Reference:

QUESTION: 20

Explanation:

Reference: