Netskope NSK200 NCCSI Exam Questions Instant Access

Question 1

With Netskope DLP, which feature would be used to detect keywords such as "Confidential" or "Access key"?

ARegular Expression

BExact Match

CFingerprint Classification

DDictionary

Answer : D

The Dictionary feature in Netskope DLP is designed to detect specific keywords or phrases, such as 'Confidential' or 'Access key.' By using a pre-defined list of sensitive terms, the Dictionary feature enables policy enforcement based on the presence of these keywords in data.

Question 2

Which statement describes how Netskope's REST API, v1 and v2, handles authentication?

ABoth REST API v1 and v2 require the use of tokens to make calls to the API

BNeither REST API v1 nor v2 require the use of tokens.

CREST API v2 requires the use of a token to make calls to the API. while API vl does not.

DREST API v1 requires the use of a token to make calls to the API. while API v2 does not.

Answer : A

The statement that describes how Netskope's REST API, v1 and v2, handles authentication is A. Both REST API v1 and v2 require the use of tokens to make calls to the API. A token is a unique string that identifies the user or application that is making the API request.The token must be included in the HTTP header of every API call as an authorization parameter1.The token can be generated from the Netskope UI or from the Netskope Platform API2.The token can also be revoked or refreshed as needed3. Therefore, option A is correct and the other options are incorrect.Reference:REST API v1 Overview - Netskope Knowledge Portal,Netskope Platform API Endpoints for REST API v1 - Netskope Knowledge Portal,REST API v2 Overview - Netskope Knowledge Portal

Question 3

You want to prevent a document stored in Google Drive from being shared externally with a public link. What would you configure in Netskope to satisfy this requirement?

AThreat Protection policy

BAPI Data Protection policy

CReal-time Protection policy

DQuarantine

Answer : B

To prevent a document stored in Google Drive from being shared externally with a public link, you need to configure an API Data Protection policy in Netskope.An API Data Protection policy allows you to discover, classify, and protect data that is already resident in your cloud services, such as Google Drive1. You can create a policy that matches the documents you want to protect based on criteria such as users, content, activity, or DLP profiles.Then, you can choose an action to prevent the documents from being shared externally, such as remove external collaborators, remove public links, or quarantine2. Therefore, option B is correct and the other options are incorrect.Reference:API Data Protection - Netskope Knowledge Portal,Add a Policy for API Data Protection - Netskope Knowledge Portal

Question 4

Your IT organization is migrating its user directory services from Microsoft Active Directory to a cloud-based Identity Provider (IdP) solution, Azure AD. You are asked to adapt the Netskope user provisioning process to work with this new cloud-based IdP.

ADirectory Importer

BMicrosoft GPO

CSCIMApp

DManual Import

Answer : C

The SCIMApp integration is the best choice for Azure AD as it allows for seamless user provisioning between cloud-based IdPs and Netskope. SCIM (System for Cross-domain Identity Management) is a standard for automating user provisioning and works effectively with cloud IdPs like Azure AD.

Question 5

Review the exhibit.

You are asked to create a new Real-time Protection policy to scan SMTP emails using data loss prevention (DLP) for personal health information (PHI). The scope is limited to only emails being sent from Microsoft Exchange Online to outside recipients.

AWeb Access policy

BEmail Outbound policy

CCTEP policy

DDLP policy

Answer : B

An 'Email Outbound' policy is specifically designed to apply data loss prevention controls on outbound emails, such as SMTP traffic from Exchange Online. This policy type enables granular control over outbound email content, ensuring compliance with DLP policies for PHI data.

Question 6

You are creating an API token to allow a DevSecOps engineer to create and update a URL list using REST API v2. In this scenario, which privilege(s) do you need to create in the API token?

AProvide read and write access for the '/events' endpoint.

BProvide read and write access for the '/urllist' endpoint.

CProvide only read access for the '/urllist' endpoint.

DProvide only write access for the '/urllist' endpoint.

Answer : B

To create an API token to allow a DevSecOps engineer to create and update a URL list using REST API v2, you need to provide read and write access for the ''/urllist'' endpoint. The ''/urllist'' endpoint is the API endpoint that allows you to manage URL lists in your Netskope tenant.You can use this endpoint to perform operations such as create, update, delete, or list URL lists3.To create an API token with this privilege, you need to go to Settings > Tools > REST API v2 > New Token, enter a token name and expiration time, add the ''/urllist'' endpoint, and select Read+Write as the privilege4. This will allow the DevSecOps engineer to use the API token in their requests to create and update URL lists. Therefore, option B is correct and the other options are incorrect.Reference:REST API v2 Overview - Netskope Knowledge Portal,Manage URL Lists - Netskope Knowledge Portal

Question 7

Your team is asked to investigate ten Netskope DLP incidents. You want to assign these incidents among different team members.

AUse your ticketing tool.

BUse the Forensic Incident workflow.

CUse the DLP Incident workflow.

DUse the Quarantine Incident workflow.

Answer : C

The DLP Incident workflow in Netskope is specifically designed for managing and investigating DLP incidents. This workflow allows incidents to be assigned to team members, facilitating efficient investigation and resolution of data loss concerns.

Netskope Certified Cloud Security Integrator NSK200 NCCSI Exam Questions