Free Netskope NSK200 Exam Questions

Question 1

You are troubleshooting an issue with Microsoft where some users complain about an issue accessing OneDrive and SharePoint Online. The configuration has the Netskope client deployed and active for most users, but some Linux machines are routed to Netskope using GRE tunnels. You need to disable inspection for all users to begin troubleshooting the issue. In this scenario, how would you accomplish this task?

A : Create a Real-time Protection policy to isolate Microsoft 365.

B : Create a Do Not Decrypt SSL policy for the Microsoft 365 App Suite.

C : Create a steering exception for the Microsoft 365 domains.

D : Create a Do Not Decrypt SSL policy for OneDrive.

Answer: B

Question 2

You are configuring GRE tunnels from a Palo Alto Networks firewall to a Netskope tenant with the Netskope for Web license enabled. Your tunnel is up as seen from the Netskope dashboard. You are unable to ping hosts behind the Netskope gateway. Which two statements are true about this scenario? (Choose two.)

A : You need to call support to enable the GRE POP selection feature.

B : Netskope only supports Web traffic through the tunnel.

C : You can only ping the probe IP provided by Netskope.

D : There is no client installed on the source hosts in your network.

Answer: B,C

Question 3

Your customer has deployed the Netskope client to secure their Web traffic. Recently, they have enabled Cloud Firewall (CFW) to secure all outbound traffic for their endpoints. Through a recent acquisition, they must secure all outbound traffic at several remote offices where they have access to the local security stack (routers and firewalls). They cannot install the Netskope client.

A : They can configure Reverse Proxy integrated with their IdP.

B : They can deploy Netskope’s DPOP to steer the targeted traffic to the Netskope Security Cloud.

C : They can use IPsec and GRE tunnels with Cloud Firewall.

D : They can secure the targeted outbound traffic using Netskope’s Cloud Threat Exchange (CTE).

Answer: C

Question 4

You created the Netskope application in your IdP for user provisioning and validated that the API Integration settings are correct and functional. However, you are not able to push the user groups from the IdP into your Netskope tenant.

A : The IdP group contains active users, as well as one or more deactivated users.

B : The IdP does not have Create User permissions.

C : You do not have enough users assigned to the IdP group.

D : You failed to push the IdP users before attempting to push the IdP groups.

Answer: A

Question 5