NSK200 by Netskope Valid Free Exam Practice Test

Question 1

You are provisioning Netskope users from Okta with SCIM Provisioning, and users are not showing up in the tenant. In this scenario, which two Netskope components should you verify first In Okta for accuracy?
(Choose two.)

A. OAuth token B. IdP Entity ID C. Netskope SAML certificate D. SCIM server URL

Correct Answer: A,D

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 2

Your company wants to deploy Netskope using a tunnel because you have a mixture of device operating systems. You also do not want to enable encryption because you want to maximize bandwidth.

A. GRE B. explicit proxy C. proxy chaining D. IPsec

Correct Answer: A

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 3

You are implementing tenant access security and governance controls for privileged users. You want to start with controls that are natively available within the Netskope Cloud Security Platform and do not require external or third-party integration.
Which three access controls would you use in this scenario? (Choose three.)

A. Applying predefined or custom roles to limit the admin ' s access to only those functions required for their job. B. Login attempts to set the number of failed attempts before the admin user is locked out of the Ul. C. IP allowlisting to control access based upon source IP addresses. D. Multi-factor authentication to verify a user ' s authenticity. E. History-based access control based on past security actions.

Correct Answer: A,B,C

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 4

Your company has many users that are remote and travel often. You want to provide the greatest visibility into their activities, even while traveling. Using Netskope. which deployment method would be used in this scenario?

A. Use proxy chaining. B. Use an IPsec tunnel. C. Use a GRE tunnel. D. Use a Netskope client.

Correct Answer: D

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 5

You want to allow both the user identities and groups to be imported in the Netskope platform. Which two methods would satisfy this requirement? (Choose two.)

A. Use System for Cross-domain Identity Management (SCIM). B. Use Directory Importer. C. Use Manual Entries. D. Use Bulk Upload with a CSV file.

Correct Answer: A,D

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 6

You are currently migrating users away from a legacy proxy to the Netskope client in the company's corporate offices. You have deployed the client to a pilot group; however, when the client attempts to connect to Netskope, it fails to establish a tunnel.
In this scenario, what would cause this problem?

A. The corporate firewall is blocking UDP port 443 to Netskope. B. The client cannot reach dns.google for EDNS resolution. C. The legacy proxy is intercepting SSL/TLS traffic to Netskope. D. The corporate firewall is blocking the Netskope EPoT address.

Correct Answer: A

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 7

Review the exhibit.

A security analyst needs to create a report to view the top five categories of unsanctioned applications accessed in the last 90 days. Referring to the exhibit, what are two data collections in Advanced Analytics that would be used to create this report? (Choose two.)

A. Alerts B. Network Events C. Page Events D. Application Events

Correct Answer: B,D

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 8

You want to provision users and groups to a Netskope tenant. You have Microsoft Active Directory servers hosted in two different forests. Which statement is true about this scenario?

A. You can use SCIM version 2 for user provisioning. B. You cannot provision users until you migrate to Azure AD or Okta. C. You can use the Netskope Adapter Tool for user provisioning. D. You can use the Netskope virtual appliance for user provisioning

Correct Answer: A

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 9

You are using the Netskope DLP solution. You notice that valid credit card numbers in a file that you just uploaded to an unsanctioned cloud storage solution are not triggering a policy violation. You can see the Skope IT application events for this traffic but no DLP alerts.
Which statement is correct in this scenario?

A. Credit card numbers are entered with a space or dash separator and not as a 16-digit consecutive number. B. Netskope client is not enabled. C. Netskope client is enabled, but API protection for the SaaS application is not configured. D. You have set the severity threshold to a higher value.

Correct Answer: A

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 10

You want to secure Microsoft Exchange and Gmail SMTP traffic for DLP using Netskope. Which statement is true about this scenario when using the Netskope client?

A. Netskope can inspect outbound SMTP traffic for Microsoft Exchange and Gmail. B. Enable REST API v2 to Inspect inbound SMTP traffic for Microsoft Exchange and Gmail. C. Enable Cloud Firewall to Inspect Inbound SMTP traffic for Microsoft Exchange and Gmail. D. Netskope can inspect inbound and outbound SMTP traffic for Microsoft Exchange and Gmail.

Correct Answer: A

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Netskope Certified Cloud Security Integrator (NCCSI) - NSK200 Exam Practice Test