NSK300無料問題集「Netskope Certified Cloud Security Architect」

質問 1

You want to enable the Netskope Client to automatically determine whether it is on-premises or off-premises.
Which two options in the Netskope UI would you use to accomplish this task? (Choose two.)

（A）the All Traffic option in the Steering Configuration section of the Ul

（B）the Enable Dynamic Steering option in the Steering Configuration section of the Ul

（C）the New Exception option in the Traffic Steering options of the Ul

（D）the On Premises Detection option under the Client Configuration section of the Ul

正解：B、D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 2

You have enabled CASB traffic steering using the Netskope Client, but have not yet enabled a Real-time Protection policy. What is the default behavior of the traffic in this scenario?

（A）Traffic will be allowed and logged.

（B）Traffic will be blocked, but not logged.

（C）Traffic will be allowed, but not logged.

（D）Traffic will be blocked and logged.

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

Users at your company ' s branch office in San Francisco report that their clients are connecting, but websites and SaaS applications are slow When troubleshooting, you notice that the users are connected to a Netskope data plane in New York where your company ' s headquarters is located.
What is a valid reason for this behavior?

（A）The Netskope Client ' s DNS call to Secure Forwarder is failing

（B）The Netskope Client ' s default DNS over HTTPS call is failing.

（C）The closest Netskope data plane to San Francisco is unavailable.

（D）The Netskope Client ' s on-premises detection check failed.

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

Review the exhibit.

You installed Directory Importer and configured it to import specific groups ot users into your Netskope tenant as shown in the exhibit. One hour after a new user has been added to the domain, the user still has not been provisioned to Netskope.
What are three potential reasons for this failure? (Choose three.)

（A）Active Directory integration is not enabled on your tenant.

（B）The server that the Directory Importer is installed on is unable to reach Netskope ' s add-on endpoint.

（C）Directory Importer does not support ongoing user syncs; you must manually provision the user.

（D）The user is not a member of the group specified as a filter

（E）The default collection interval is 180 minutes, therefore a sync may not have run yet.

正解：B、D、E 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

Your CISO asks that you to provide a report with a visual representation of the top 10 applications (by number of objects) and their risk score. As the administrator, you decide to use a Sankey visualization in Advanced Analytics to represent the data in an efficient manner.
In this scenario, which two field types are required to produce a Sankey Tile in your report? {Choose two.)

（A）Dimension

（B）Period of Type

（C）Measure

（D）Pivot Ranks

正解：A、C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 6

You are assisting your network administrator to troubleshoot an issue with client-based NPA.
In the Netskope UI, what information do you need from the administrator to run the NPA troubleshooter for this user? (Choose two.)

（A）Private App Name

（B）User & Device

（C）Private App ID

（D）Publisher Name

正解：A、B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 7

You deployed IPsec tunnels to steer on-premises traffic to Netskope. You are now experiencing problems with an application that had previously been working. In an attempt to solve the issue, you create a Steering Exception in the Netskope tenant tor that application: however, the problems are still occurring Which statement is correct in this scenario?

（A）You must create a private application to steer Web application traffic to Netskope over an IPsec tunnel.

（B）Steering bypasses for IPsec tunnels must be applied at your edge network device.

（C）Exceptions only work with IP address destinations

（D）You must deploy a PAC file to ensure the traffic is bypassed pre-tunnel

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 8

You recently began deploying Netskope at your company. You are steering all traffic, but you discover that the Real-time Protection policies you created to protect Microsoft OneDrive are not being enforced.
Which default setting in the UI would you change to solve this problem?

（A）Remove the default steering exception for Cloud Storage.

（B）Disable the default certificate-pinned application

（C）Disable the default Microsoft appsuite SSL rule.

（D）Remove the default steering exception for domains.

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 9

You deployed Netskope Cloud Security Posture Management (CSPM) using pre-defined benchmark rules to monitor your cloud posture in AWS, Azure, and GCP. You are asked to assess if you can extend the Netskope CSPM solution by creating custom rules for each environment.
Which statement is correct?

（A）With Netskope CSPM, you can create custom rules using Domain Specific Language for AWS. Azure, but not for GCP.

（B）With Netskope CSPM, you can create custom rules using Domain Specific Language for AWS. Azure, and GCP

（C）You will need to evaluate SaaS Security Posture Management (SSPM) in addition to CSPM so that rules applied to GCP will align with Google Workspace

（D）Custom rules using Domain Specific Language are only available when using SSPM.

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

NSK300 無料問題集「Netskope Certified Cloud Security Architect」

弊社を連絡する

関連リンク

トップ試験