Netskope NSK101 NCCSA Exam Questions Instant Access

Question 1

Click the Exhibit button.

Referring to the exhibit, you have a user reporting that a blocked website is needed for legitimate business reasons. Upon review, you determine that the user has been blocked by the Global Block policy. You need to create an exception forthat domain. You create a custom URL list that includes the domain.

In this scenario, which two actions would allow this access? (Choose two.)

ACreate a custom category with the custom URL list as an included URL list and add it to an allow policy below the triggered Global Block policy.

BCreate a custom category with the custom URL list as an included URL list and add it to an allow policy above the triggered Global Block policy.

CAdd the custom URL list as an excluded URL list to the category in the Global Allow policy.

DAdd the custom URL list as an excluded URL list to the category in the Global Block policy.

Answer : B, C

Identify the Blocked Policy: According to the exhibit, the website is blocked by the 'Global Block Policy.'

Create a Custom URL List: To create an exception for the domain, you need to first create a custom URL list that includes the domain in question.

Navigate to the URL List section in the Netskope UI.

Create a new URL list and add the domain that needs to be allowed.

Option B: Create a custom category with the custom URL list as an included URL list and add it to an allow policy above the Global Block policy.

Go to the Policy section in the Netskope UI.

Create a new policy, ensuring it is an 'Allow' policy.

Add the custom category to this allow policy.

Position this allow policy above the Global Block policy to ensure it takes precedence.

This ensures that the URLs in the custom list are allowed before the Global Block policy is evaluated.

Option C: Add the custom URL list as an excluded URL list to the category in the Global Block policy.

Edit the existing Global Block policy.

Add the custom URL list to the excluded URL list section of this policy.

This will exclude the URLs in the custom list from being blocked by the Global Block policy.

Refer to the Netskope Knowledge Portal for managing custom URL lists and policy configurations.

Question 2

What are two characteristics of Netskope's Private Access Solution? (Choose two.)

AIt provides protection for private applications.

BIt provides access to private applications.

CIt acts as a cloud-based firewall.

DIt requires on-premises hardware.

Answer : A, B

Netskope's Private Access Solution is a service that allows users to securely access private applications without exposing them to the internet or using VPNs. It provides protection for private applications by encrypting the traffic, enforcing granular policies, and preventing data exfiltration. It also provides access to private applications by creating a secure tunnel between the user's device and the application's server, regardless of their location or network. It does not act as a cloud-based firewall, as it does not filter or block traffic based on ports or protocols. It does not require on-premises hardware, as it is a cloud-native solution that leverages Netskope's global network of points of presence (POPs).Reference:[Netskope Private Access].

Question 3

You are working with a large retail chain and have concerns about their customer dat

a. You want to protect customer credit card data so that it is never exposed in transit or at rest. In this scenario, which regulatory compliance standard should be used to govern this data?

ASOC 3

BPCI-DSS

CAES-256

DISO 27001

Answer : B

PCI-DSS stands for Payment Card Industry Data Security Standard, which is a set of security requirements for organizations that handle credit card data. It aims to protect cardholder data from unauthorized access, disclosure, or theft, both in transit and at rest. PCI-DSS covers various aspects of security, such as encryption, authentication, firewall, logging, monitoring, and incident response. If you are working with a large retail chain and have concerns about their customer data, you should use PCI-DSS as the regulatory compliance standard to govern this data. SOC 3, AES-256, and ISO 27001 are not specific to credit card data protection, although they may have some relevance to general security practices.Reference:[PCI-DSS], [SOC 3], [AES-256], [ISO 27001].

Question 4

Which three statements about Netskope Private Access Publishers are correct? (Choose three.)

APublishers can run on Windows or Linux servers.

BPublishers can be deployed in both private data centers and public cloud providers to provide access to applications across disparate locations.

CPublisher deployment can be automated in public cloud environments using Netskope's REST API.

DPublishers only make outbound connections to the Netskope Security Cloud which reduces the amount of public exposure.

EPublishers can be deployed as hardware or software appliances to provide access to applications across disparate locations.

Answer : A, B, D

The following statements about Netskope Private Access Publishers are correct:

Publishers can run on Windows or Linux servers:

Publishers are versatile and can be installed on both Windows and Linux operating systems.

Publishers can be deployed in both private data centers and public cloud providers to provide access to applications across disparate locations:

This flexibility allows organizations to use Publishers to connect applications hosted in various environments, ensuring seamless access across locations.

Publishers only make outbound connections to the Netskope Security Cloud which reduces the amount of public exposure:

By making only outbound connections, Publishers minimize the attack surface, enhancing security by reducing public exposure.

Netskope Private Access Deployment Guide

Netskope REST API v2 Overview

Question 5

What is a benefit that Netskope instance awareness provides?

AIt prevents movement of corporate sensitive data to a personal Dropbox account.

BIt prevents the user from copying information from a corporate email and pasting the information into a GitHub repository.

CIt differentiates between an IT managed Google Drive instance versus a personal Dropbox account.

DIt differentiates between an IT managed Google Drive instance versus a personal Google Drive instance.

Answer : D

A benefit that Netskope instance awareness provides is that it differentiates between an IT managed Google Drive instance versus a personal Google Drive instance. Instance awareness is a feature in the Netskope platform that allows you to define and identify different instances of the same cloud application based on the domain name or URL. For example, you can define an instance for your IT managed Google Drive instance (such as drive.google.com/a/yourcompany.com) and another instance for your personal Google Drive instance (such as drive.google.com). This way, you can differentiate between them and apply different policies and actions based on the instance. This can help you prevent data leakage, enforce compliance, or improve visibility for your cloud application activities. Preventing movement of corporate sensitive data to a personal Dropbox account, preventing the user from copying information from a corporate email and pasting it into a GitHub repository, or differentiating between an IT managed Google Drive instance versus an IT managed Box instance are not benefits that Netskope instance awareness provides, as they are either unrelated or irrelevant to the instance awareness feature.Reference:Netskope Security Cloud Operation & Administration (NSCO&A) - Classroom Course, Module 5: Real-Time Policies, Lesson 4: App Instances.

Question 6

Which two statements are correct about DLP Incidents in the Netskope platform? (Choose two.)

AAn incident can be associated to one or more DLP policies.

BAn incident can have one or more DLP violations.

CAn incident can be assigned to one or more administrators.

DAn incident can be associated to one or more DLP rules.

Answer : B, D

Two statements that are correct about DLP Incidents in the Netskope platform are: An incident can have one or more DLP violations and an incident can be associated to one or more DLP rules. A DLP violation occurs when a file or object matches a DLP rule used in a DLP profile. A DLP rule defines the criteria for detecting sensitive data, such as keywords, regular expressions, fingerprints, machine learning classifiers, etc. A DLP profile is a collection of DLP rules that can be applied to a policy. An incident is a record of a file or object that triggered a DLP policy violation. An incident can have multiple violations if the file or object matches multiple DLP rules from different profiles. An incident can also be associated to multiple DLP rules if the file or object matches more than one rule from the same profile.Reference:About DLPDLP Profiles

Question 7

When accessing an encrypted website (HTTPS), what is a reason why you might receive a "certificate not trusted" browser message?

AA certificate authority is installed on the server.

BA self-signed certificate is installed on the server.

CA public certificate is installed on the server.

DThere is no certificate installed on the server.

Answer : B

When accessing an encrypted website (HTTPS), a 'certificate not trusted' message in the browser usually occurs because the certificate presented by the website is not issued by a trusted Certificate Authority (CA). A common scenario for this is when a self-signed certificate is installed on the server. Self-signed certificates are not signed by a CA that is recognized by the browser, so the browser cannot verify the authenticity of the certificate, leading to the 'certificate not trusted' message.

'If the SSL certificate is self-signed, the browser will not trust the certificate because it has not been issued by a trusted CA.'.

Netskope Certified Cloud Security Administrator Exam NSK101 NCCSA Exam Questions