Get 2023 Most Reliable Netskope NSK100 Training Materials [Q24-Q38]

NEW QUESTION 24
A customer changes CCI scoring from the default objective score to another score. In this scenario, what would be a valid reason for making this change?

The customer has discovered a new SaaS application that is not yet rated in the CCI database.

The customer’s organization places a higher business risk weight on vendors that claim ownership of their data.

The customer wants to punish an application vendor for providing poor customer service.

The customer’s organization uses a SaaS application that is currently listed as “under research”.

NEW QUESTION 25
In which scenario would you use a SAML reverse proxy?

When the API-enabled protection exceeds the Cloud App API usage limits and cannot be used anymore.

When the organization wants to perform inline inspection of cloud application traffic for roaming users that do not have the Netskope agent installed.

When there are multiple SAML IdPs in use and the SAML reverse proxy can help federate them all together.

When PAC files or explicit proxies can be used to steer traffic to the Netskope platform.

NEW QUESTION 26
Exhibit

A user is connected to a cloud application through Netskope’s proxy.
In this scenario, what information is available at Skope IT? (Choose three.)

username. device location

destination IP. OS patch version

account instance, URL category

user activity, cloud app risk rating

file version, shared folder

NEW QUESTION 27
Which three technologies describe the primary cloud service models as defined by the National Institute of Standards and Technology (NIST)? (Choose three.)

Cloud Service Provider (CSP)

Identity as a Service (IDaaS)

Platform as a Service (PaaS)

Software as a Service (SaaS)

Infrastructure as a Service (laaS)

Explanation
The three technologies that describe the primary cloud service models as defined by the National Institute of Standards and Technology (NIST) are Platform as a Service (PaaS), Software as a Service (SaaS), and Infrastructure as a Service (IaaS). These service models are based on the type of computing capability that is provided by the cloud provider to the cloud consumer over a network. According to NIST, these service models have the following definitions:
Platform as a Service (PaaS): The capability provided to the consumer is to deploy onto the cloud infrastructure consumer-created or acquired applications created using programming languages, libraries, services, and tools supported by the provider. The consumer does not manage or control the underlying cloud infrastructure including network, servers, operating systems, or storage, but has control over the deployed applications and possibly configuration settings for the application-hosting environment.
Software as a Service (SaaS): The capability provided to the consumer is to use the provider’s applications running on a cloud infrastructure. The applications are accessible from various client devices through either a thin client interface, such as a web browser (e.g., web-based email), or a program interface. The consumer does not manage or control the underlying cloud infrastructure including network, servers, operating systems, storage, or even individual application capabilities, with the possible exception of limited user-specific application configuration settings.
Infrastructure as a Service (IaaS): The capability provided to the consumer is to provision processing, storage, networks, and other fundamental computing resources where the consumer is able to deploy and run arbitrary software, which can include operating systems and applications. The consumer does not manage or control the underlying cloud infrastructure but has control over operating systems, storage, and deployed applications; and possibly limited control of select networking components (e.g., host firewalls).
References: The NIST Definition of Cloud ComputingNIST Cloud Computing Program

NEW QUESTION 28
Which two functions are available for both inline and API protection? (Choose two.)

multi-factor authentication

threat protection

DLP

Cloud Security Posture Management (CSPM)

NEW QUESTION 29
You want to deploy Netskope’s zero trust network access (ZTNA) solution, NPA. In this scenario, which action would you perform to accomplish this task?

Create an OAuth identity access control between your users and your applications.

Set up a reverse proxy using SAML and an identity provider.

Enable Steer all Private Apps in your existing steering configuration(s) from the admin console.

Configure SCIM to exchange identity information and attributes with your applications.

NEW QUESTION 30
Exhibit

Which portion of the interface shown in the exhibit allows an administrator to set severity, assign ownership, track progress, and perform forensic analysis with excerpts of violating content?

Skope IT-> Alerts

Incidents -> DLP

API-enabled Protection -> Inventory

Reports -> New Report

NEW QUESTION 31
What are two CASB inline interception use cases? (Choose two.)

blocking file uploads to a personal Box account

running a retroactive scan for data at rest in Google Drive

using the Netskope steering client to provide user alerts when sensitive information is posted in Slack

scanning Dropbox for credit card information

NEW QUESTION 32
You want to set up a Netskope API connection to Box.
What two actions must be completed to enable this connection? (Choose two.)

Install the Box desktop sync client.

Authorize the Netskope application in Box.

Integrate Box with the corporate IdP.

Configure Box in SaaS API Data protection.

NEW QUESTION 33
Which two cloud security and infrastructure enablement technologies does Secure Access Service Edge (SASE) combine into its unified platform? (Choose two.)

Distributed Denial of Service Protection (DDoS)

Zero Trust Network Access (ZTNA)

Cloud Access Security Broker (CASB)

Unified Threat Management (UTM)

NEW QUESTION 34
A customer wants to detect misconfigurations in their AWS cloud instances.
In this scenario, which Netskope feature would you recommend to the customer?

Netskope Secure Web Gateway (SWG)

Netskope Cloud Security Posture Management (CSPM)

Netskope Advanced DLP and Threat Protection

Netskope SaaS Security Posture Management (SSPM)

NEW QUESTION 35
What are two reasons why legacy solutions, such as on-premises firewalls and proxies, fail to secure the data and data access compared to Netskope Secure Web Gateway? (Choose two.)

Legacy solutions are unable to see the user who is trying to access the application.

The applications where the data resides are no longer in one central location.

Legacy solutions do not meet compliance standards.

The users accessing this data are not in one central place.

NEW QUESTION 36
What are two fundamental differences between the inline and API implementation of the Netskope platform?
(Choose two.)

The API implementation can be used with both sanctioned and unsanctioned applications.

The API implementation can only be used with sanctioned applications.

The inline implementation can effectively block a transaction in both sanctioned and unsanctioned applications.

The inline implementation can only effectively block a transaction in sanctioned applications.

NEW QUESTION 37
You are deploying TLS support for real-time Web and SaaS transactions. What are two secure implementation methods in this scenario? (Choose two.)

Bypass TLS 1.3 because it is not widely adopted.

Downgrade to TLS 1.2 whenever possible.

Support TLS 1.2 only when 1.3 is not supported by the server.

Require TLS 1.3 for every server that accepts it.

NEW QUESTION 38
Which two traffic steering configurations are supported by Netskope? (Choose two.)

browser isolation traffic only

cloud applications only

all Web traffic including cloud applications

Web traffic only