Question 1

You are implementing a solution to deploy Netskope for machine traffic in an AWS account across multiple VPCs. You want to deploy the least amount of tunnels while providing connectivity for all VPCs. How would you accomplish this task?

Options :

A : Use IPsec tunnels from the AWS Virtual Private Gateway.

B : Use GRE tunnels from the AWS Transit Gateway.

C : Use GRE tunnels from the AWS Virtual Private Gateway

D : Use IPsec tunnels from the AWS Transit Gateway.

Answer: D

Question 2

You recently began deploying Netskope at your company. You are steering all traffic, but you discover that the Real-time Protection policies you created to protect Microsoft OneDrive are not being enforced. Which default setting in the Ul would you change to solve this problem?

Options :

A : Disable the default Microsoft appsuite SSL rule.

B : Disable the default certificate-pinned application

C : Remove the default steering exception for domains.

D : Remove the default steering exception for Cloud Storage.

Answer: C

Question 3

Your Netskope Client tunnel has connected to Netskope; however, the user is not receiving any steering or client configuration updates What would cause this issue?

Options :

A : The client is unable to establish communication to add-on-[tenantl.goskope.com.

B : The client is unable to establish communication to gateway-(tenant|.goskope.com.

C : The Netskope Client service is not running.

D : An invalid steering exception was created in the tenant

Answer: C

Question 4

Review the exhibit.

A user has attempted to upload a file to Microsoft OneDrive that contains source code with Pll and PCI data. Referring to the exhibit, which statement Is correct?

Options :

A : The user will be blocked and a single Incident will be generated referencing the DLP-PCI profile.

B :

The user will be blocked and a single Incident will be generated referencing all of the matching DLP profiles

C :

The user will be blocked and a separate incident will be generated for each of the matching DLP profiles.

D : The user will be alerted and a single incident will be generated referencing the DLP-PII profile.

Answer: C

Question 5

You are architecting a Netskope steering configuration for devices that are not owned by the organization The users could be either on-premises or off-premises and the architecture requires that traffic destined to the company's instance of Microsoft 365 be steered to Netskope for inspection. How would you achieve this scenario from a steering perspective?

Options :

A : Use IPsec and GRE tunnels.

B : Use reverse proxy.

C : Use explicit proxy and the Netskope Client

D : Use DPoP and Secure Forwarder

Answer: C

Confidently Practice Online with Free NSK300 Exam Cram

Buying Options: