NSK300無料問題集「Netskope Certified Cloud Security Architect」

質問 1

You are architecting a Netskope steering configuration for devices that are not owned by the organization The users could be either on-premises or off-premises and the architecture requires that traffic destined to the company's instance of Microsoft 365 be steered to Netskope for inspection.
How would you achieve this scenario from a steering perspective?

（A）Use DPoP and Secure Forwarder

（B）Use explicit proxy and the Netskope Client

（C）Use reverse proxy.

（D）Use IPsec and GRE tunnels.

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 2

You deployed IPsec tunnels to steer on-premises traffic to Netskope. You are now experiencing problems with an application that had previously been working. In an attempt to solve the issue, you create a Steering Exception in the Netskope tenant tor that application: however, the problems are still occurring Which statement is correct in this scenario?

（A）You must create a private application to steer Web application traffic to Netskope over an IPsec tunnel.

（B）Steering bypasses for IPsec tunnels must be applied at your edge network device.

（C）Exceptions only work with IP address destinations

（D）You must deploy a PAC file to ensure the traffic is bypassed pre-tunnel

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

You are building an architecture plan to roll out Netskope for on-premises devices. You determine that tunnels are the best way to achieve this task due to a lack of support for explicit proxy in some instances and IPsec is the right type of tunnel to achieve the desired security and steering.
What are three valid elements that you must consider when using IPsec tunnels in this scenario? (Choose three.)

（A）cipher support on tunnel-initiating devices

（B）Netskope Client behavior when on-premises

（C）bandwidth considerations

（D）the impact of threat scanning performance

（E）the categories to be blocked

正解：A、C、D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

Users in your network are attempting to reach a website that has a self-signed certificate using a GRE tunnel to Netskope. They are currently being blocked by Netskope with an SSL error. How would you allow this traffic?

（A）Set the No SNI setting in Netskope to Bypass.

（B）Configure a Do Not Decrypt SSL Decryption rule to allow traffic to pass.

（C）Configure a Real-time Protection policy with the action set to Allow.

（D）Ensure that the users add the self-signed certificate to their local certificate store.

正解：B 解答を投票する

質問 5

Your customer is currently using Directory Importer with Active Directory (AD) to provision users to Nelskope. They have recently acquired three new companies (A. B. and C) and want to onboard users from the companies onto the NetsKope platform. Information about the companies is shown below.
- Company A uses Active Directory.
-- Company B uses Azure AD.
-- Company C uses Okta Universal Directory.
Which statement is correct in this scenario?

（A）Company A users cannot be provisioned to Netskope because the customer is already using AD Importer to import users from another Active Directory environment.

（B）Users from Company B and Company C cannot be provisioned because the customer is already using AD Importer.

（C）Either Company B or Company C users cannot be provisioned because integration with only one SCIM solution is allowed.

（D）Users from Companies A. B, and C can be provisioned to Netskope by deploying additional AD Importers and integrating more than one SCIM solution.

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 6

Your company purchased Netskope's Next Gen Secure Web Gateway You are working with your network administrator to create GRE tunnels to send traffic to Netskope Your network administrator has set up the tunnel, keepalives. and a policy-based route on your corporate router to send all HTTP and HTTPS traffic to Netskope. You want to validate that the tunnel is configured correctly and that traffic is flowing.
In this scenario, which two statements are correct? (Choose two.)

（A）You can verify that the tunnel is up and receiving traffic in the Netskope Ul under Settings > Security Cloud Platform > GRE.

（B）You must use your own monitoring tools to verify that the tunnel is up.

（C）You can use your local router or network device to verify that keepalives are being received and traffic is flowing to Netskope.

（D）You can verify that the tunnel is up in the Netskope Trust portal at https://trust netskope.com/.

正解：A、C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

NSK300 無料問題集「Netskope Certified Cloud Security Architect」

弊社を連絡する

関連リンク

トップ試験