Free Netskope NSK200 Exam Questions

Question 1

Recently your company implemented Zoom for collaboration purposes and you are attempting to inspect the traffic with Netskope. Your initial attempt reveals that you are not seeing traffic from the Zoom client that is used by all users. You must ensure that this traffic is visible to Netskope. In this scenario, which two steps must be completed to satisfy this requirement? (Choose two.)

A : Create a steering exception for Zoom to ensure traffic is reaching Netskope.

B : Create a Do Not Decrypt SSL policy for the Zoom application suite.

C : Remove the Zoom certificate-pinned application from the default steering configuration.

D : Remove the default steering exception for the Web Conferencing Category.

Answer: C,D

Question 2

You are configuring GRE tunnels from a Palo Alto Networks firewall to a Netskope tenant with the Netskope for Web license enabled. Your tunnel is up as seen from the Netskope dashboard. You are unable to ping hosts behind the Netskope gateway. Which two statements are true about this scenario? (Choose two.)

A : You need to call support to enable the GRE POP selection feature.

B : Netskope only supports Web traffic through the tunnel.

C : You can only ping the probe IP provided by Netskope.

D : There is no client installed on the source hosts in your network.

Answer: B,C

Question 3

You created the Netskope application in your IdP for user provisioning and validated that the API Integration settings are correct and functional. However, you are not able to push the user groups from the IdP into your Netskope tenant.

A : The IdP group contains active users, as well as one or more deactivated users.

B : The IdP does not have Create User permissions.

C : You do not have enough users assigned to the IdP group.

D : You failed to push the IdP users before attempting to push the IdP groups.

Answer: A

Question 4

Your customer has deployed the Netskope client to secure their Web traffic. Recently, they have enabled Cloud Firewall (CFW) to secure all outbound traffic for their endpoints. Through a recent acquisition, they must secure all outbound traffic at several remote offices where they have access to the local security stack (routers and firewalls). They cannot install the Netskope client.

A : They can configure Reverse Proxy integrated with their IdP.

B : They can deploy Netskope’s DPOP to steer the targeted traffic to the Netskope Security Cloud.

C : They can use IPsec and GRE tunnels with Cloud Firewall.

D : They can secure the targeted outbound traffic using Netskope’s Cloud Threat Exchange (CTE).

Answer: C

Question 5