最新的Netskope NSK300免費考試真題

問題1

You deployed IPsec tunnels to steer on-premises traffic to Netskope. You are now experiencing problems with an application that had previously been working. In an attempt to solve the issue, you create a Steering Exception in the Netskope tenant tor that application: however, the problems are still occurring Which statement is correct in this scenario?

A. Exceptions only work with IP address destinations

B. You must create a private application to steer Web application traffic to Netskope over an IPsec tunnel.

C. Steering bypasses for IPsec tunnels must be applied at your edge network device.

D. You must deploy a PAC file to ensure the traffic is bypassed pre-tunnel

正確答案: C

說明：（僅 Fast2test 成員可見）

問題2

You are implementing Netskope Cloud Exchange in your company lo include functionality provided by third- party partners. What would be a reason for using Netskope Cloud Risk Exchange in this scenario?

A. to feed SOC with detection and response services

B. to ingest events and alerts from a Netskope tenant

C. to automate service tickets from alerts of interest

D. to map multiple scores to a normalized range

正確答案: C

說明：（僅 Fast2test 成員可見）

問題3

You are already using Netskope CSPM to monitor your AWS accounts for compliance. Now you need to allow access from your company-managed devices running the Netskope Client to only Amazon S3 buckets owned by your organization. You must ensure that any current buckets and those created in the future will be allowed Which configuration satisfies these requirements?

A. Steering: Cloud Apps Only. All Traffic Policy type: Real-time Protection Constraint: Storage. Bucket Does Match -ALLAccounts Action: Allow

B. Steering: Cloud Apps Only, All Traffic Policy type: Real-time Protection Constraint: Storage. Bucket Does Not Match -ALLAccounts Action: Block

C. Steering: All Web Traffic Policy type: API Data Protection Constraint: Storage, Bucket Does Match *@myorganization.com Action: Allow

D. Steering: Cloud Apps Only Policy type: Real-time Protection
Constraint: Storage. Bucket Does Not Match *@myorganization.com Action: Block

正確答案: B

問題4

You jus! deployed and registered an NPA publisher for your first private application and need to provide access to this application for the Human Resources (HR) users group only. How would you accomplish this task?

A. 1. Enable private app steering in Tenant Steering Configuration.
2. Create a new private app and assign it to the HR user group.

B. 1. Enable private app steering in the Steering Configuration assigned to the HR group.
2. Create a new private app and assign it to the HR user group
3. Create a new Real-time Protection policy as follows:
Source = HR user group Destination = Private App Action = Allow

C. 1. Create a new private app and assign it to the HR user group.
2. Create a new Real-time Protection policy as follows:
Source = HR user group Destination = Private App Action = Allow.

D. 1. Enable private app steering in the Steering Configuration assigned to the HR group.
2. Create a new Private App.
3. Create a new Real-time Protection policy as follows;
Source = HR user group Destination = Private App Action = Allow

正確答案: D

問題5

You are using Netskope CSPM for security and compliance audits across your multi-cloud environments. To decrease the load on the security operations team, you are researching how to auto-re mediate some of the security violations found in low-risk environments.
Which statement is correct in this scenario?

A. You can use Netskope API-enabled Protection for auto-remediation of security violation results.

B. You can use Netskope Auto-remediation frameworks from the public Netskope GitHub Open Source repository for auto-re mediation of security violation results.

C. Netskope does not support automatic remediation of security violation results due to the high risk associated with it.

D. You can use Netskope Cloud Exchange for auto-remediation of security violation results.

正確答案: B

說明：（僅 Fast2test 成員可見）

問題6

Review the exhibit.

AcmeCorp has recently begun using Microsoft 365. The organization is concerned that employees will start using third-party non-AcmeCorp OneDrive instances to store company data. The CISO asks you to use Netskope to create a policy that ensures that no data is being uploaded to non-AcmeCorp instances of OneDrive.
Referring to the exhibit, which two policies would accomplish this posture? (Choose two.)

A. 3

B. 4

C. 2

D. 1

正確答案: A,C

說明：（僅 Fast2test 成員可見）

問題7

You are asked to ensure that a Web application your company uses is both reachable and decrypted by Netskope. This application is served using HTTPS on port 6443. Netskope is configured with a default Cloud Firewall configuration and the steering configuration is set for All Traffic.
Which statement is correct in this scenario?

A. Enable "Steer non-standard ports" in the steering configuration and create a corresponding Real-time Protection policy to allow the traffic

B. Create a Firewall App in Netskope along with the corresponding Real-time Protection policy to allow the traffic.

C. Nothing is required since Netskope is steering all traffic.

D. Enable "Steer non-standard ports" in the steering configuration and add the domain and port as a new non-standard port

正確答案: D

說明：（僅 Fast2test 成員可見）

最新的Netskope Certified Cloud Security Architect - NSK300免費考試真題

聯系我們

站內鏈接

最新更新