Free Netskope NSK200 Exam Questions

Question 1

Your customer has deployed the Netskope client to secure their Web traffic. Recently, they have enabled Cloud Firewall (CFW) to secure all outbound traffic for their endpoints. Through a recent acquisition, they must secure all outbound traffic at several remote offices where they have access to the local security stack (routers and firewalls). They cannot install the Netskope client.

A : They can configure Reverse Proxy integrated with their IdP.

B : They can deploy Netskope’s DPOP to steer the targeted traffic to the Netskope Security Cloud.

C : They can use IPsec and GRE tunnels with Cloud Firewall.

D : They can secure the targeted outbound traffic using Netskope’s Cloud Threat Exchange (CTE).

Answer: C

Question 2

You are configuring GRE tunnels from a Palo Alto Networks firewall to a Netskope tenant with the Netskope for Web license enabled. Your tunnel is up as seen from the Netskope dashboard. You are unable to ping hosts behind the Netskope gateway. Which two statements are true about this scenario? (Choose two.)

A : You need to call support to enable the GRE POP selection feature.

B : Netskope only supports Web traffic through the tunnel.

C : You can only ping the probe IP provided by Netskope.

D : There is no client installed on the source hosts in your network.

Answer: B,C

Question 3

You created the Netskope application in your IdP for user provisioning and validated that the API Integration settings are correct and functional. However, you are not able to push the user groups from the IdP into your Netskope tenant.

A : The IdP group contains active users, as well as one or more deactivated users.

B : The IdP does not have Create User permissions.

C : You do not have enough users assigned to the IdP group.

D : You failed to push the IdP users before attempting to push the IdP groups.

Answer: A

Question 4

Your customer has deployed the Netskope client to secure their Web traffic. Recently, they have enabled Cloud Firewall (CFW) to secure all outbound traffic for their endpoints. Through a recent acquisition, they must secure all outbound traffic at several remote offices where they have access to the local security stack (routers and firewalls). They cannot install the Netskope client.

A : They can configure Reverse Proxy integrated with their IdP.

B : They can deploy Netskope’s DPOP to steer the targeted traffic to the Netskope Security Cloud.

C : They can use IPsec and GRE tunnels with Cloud Firewall.

D : They can secure the targeted outbound traffic using Netskope’s Cloud Threat Exchange (CTE).

Answer: C

Question 5

You are given an MD5 hash of a file suspected to be malware by your security incident response team. They ask you to offer insight into who has encountered this file and from where was the threat initiated. In which two Skope IT events tables would you search to find the answers to these questions? (Choose two.)

A : Application Events

B : Network Events

C : Alerts

D :

Answer: A,C