Netskope Certified Cloud Security Architect (NSK300) Free Practice Test

Question 1

Your organization's software deployment team did the initial install of the Netskope Client with SCCM. As the Netskope administrator, you will be responsible for all up-to-date upgrades of the client.
Which two actions would be required to accomplish this task9 (Choose two.)

A. Set the installmode-IDP flag during the original Install.

B. In the Client Configuration, set Upgrade Client Automatically to Specific Golden Release.

C. In the Client Configuration, set Upgrade Client Automatically to Latest Release.

D. Set the autoupdate-on flag during the original Install.

Correct Answer: C,D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

A hospital has a patient form that they share with their patients over Gmail. The blank form can be freely shared among anyone. However, if the form has any information filled out. the document is considered confidential.
Which rule type should be used in the DLP profile to match such a document?

A. Use a dictionary rule for all your patient names.

B. Use Exact Match with patient names

C. Use fingerprint classification.

D. Use predefined DLP Rule(s) that match the patient name.

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 3

A company needs to block access to their instance of Microsoft 365 from unmanaged devices. They have configured Reverse Proxy and have also created a policy that blocks login activity for the AD group
"marketing-users" for the Reverse Proxy access method. During UAT testing, they notice that access from unmanaged devices to Microsoft 365 is not blocked for marketing users.
What is causing this issue?

A. There is an invalid certificate in the SAML response.

B. The username in the name ID field does not have the "marketing-users" group name.

C. The username in the name ID field is not in the format of the e-mail address.

D. There is a missing group name in the SAML response.

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 4

You recently began deploying Netskope at your company. You are steering all traffic, but you discover that the Real-time Protection policies you created to protect Microsoft OneDrive are not being enforced.
Which default setting in the Ul would you change to solve this problem?

A. Disable the default certificate-pinned application

B. Remove the default steering exception for domains.

C. Remove the default steering exception for Cloud Storage.

D. Disable the default Microsoft appsuite SSL rule.

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

You have users connecting to Netskope from around the world You need a way for your NOC to quickly view the status of the tunnels and easily visualize where the tunnels are located Which Netskope monitoring tool would you use in this scenario?

A. Network Steering in Digital Experience Management

B. Network Events in Skope IT

C. Alerts in Skope IT

D. Web Usage Summary in Advanced Analytics

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 6

You jus! deployed and registered an NPA publisher for your first private application and need to provide access to this application for the Human Resources (HR) users group only. How would you accomplish this task?

A. 1. Enable private app steering in Tenant Steering Configuration.
2. Create a new private app and assign it to the HR user group.

B. 1. Enable private app steering in the Steering Configuration assigned to the HR group.
2. Create a new Private App.
3. Create a new Real-time Protection policy as follows;
Source = HR user group Destination = Private App Action = Allow

C. 1. Enable private app steering in the Steering Configuration assigned to the HR group.
2. Create a new private app and assign it to the HR user group
3. Create a new Real-time Protection policy as follows:
Source = HR user group Destination = Private App Action = Allow

D. 1. Create a new private app and assign it to the HR user group.
2. Create a new Real-time Protection policy as follows:
Source = HR user group Destination = Private App Action = Allow.

Correct Answer: B

Question 7

Review the exhibit.

You installed Directory Importer and configured it to import specific groups ot users into your Netskope tenant as shown in the exhibit. One hour after a new user has been added to the domain, the user still has not been provisioned to Netskope.
What are three potential reasons for this failure? (Choose three.)

A. Active Directory integration is not enabled on your tenant.

B. The server that the Directory Importer is installed on is unable to reach Netskope's add-on endpoint.

C. Directory Importer does not support ongoing user syncs; you must manually provision the user.

D. The user is not a member of the group specified as a filter

E. The default collection interval is 180 minutes, therefore a sync may not have run yet.

Correct Answer: A,B,D

Welcome to TestSimulate

Netskope Certified Cloud Security Architect (NSK300) Free Practice Test