Free NSK300 Sample Questions — Netskope Certified Cloud Security Architect

You are asked to create a customized restricted administrator role in your Netskope tenant for a newly hired employee. Which two statements are correct in this scenario? (Choose two.)

• A. An admin role prevents admins from downloading and viewing file content by default
• B. The scope of the data shown in the UI can be restricted to specific events
• C. All role privileges default to Read Only for all functional areas
• D. Obfuscation can be applied to all functional areas

You have an NG-SWG customer that currently steers all Web traffic to Netskope using the Netskope Client. They have identified one new native application on Windows devices that is a certificate-pinned application. Users are not able to access the application due to certificate pinning. The customer wants to configure the Netskope Client so that the traffic from the application is steered to Netskope and the application works as expected. Which two methods would satisfy the requirements? (Choose two.)

• A. Bypass traffic using the bypass action in the Real-time Protection policy
• B. Configure the SSL Do Not Decrypt policy to not decrypt traffic for domains used by the native application
• C. Configure domain exceptions in the steering configuration for the domains used by the native application
• D. Tunnel traffic to Netskope and bypass traffic inspection at the Netskope proxy

A company has deployed Explicit Proxy over Tunnel (EPoT) for their VDI users. They have configured Forward Proxy authentication using Okta Universal Directory. They have also configured a number of Real-time Protection policies that block access to different Web categories for different AD groups so, for example, marketing users are blocked from accessing gambling sites. During User Acceptance Testing, they see inconsistent results where sometimes marketing users are able to access gambling sites and sometimes they are blocked as expected. They are seeing this inconsistency based on who logs into the VDI server first. What is causing this behavior?

• A. Forward Proxy is not configured to use the Cookie Surrogate
• B. Forward Proxy is not configured to use the IP Surrogate
• C. Forward Proxy authentication is configured but not enabled
• D. Forward Proxy is configured to use the Cookie Surrogate

What are three valid Instance Types for supported SaaS applications when using Netskope’s API-enabled Protection? (Choose three.)

• A. Forensic
• B. API Data Protection
• C. Behavior Analytics
• D. DLP Scan
• E. Quarantine

Users at your company’s branch office in San Francisco report that their clients are connecting, but websites and SaaS applications are slow. When troubleshooting, you notice that the users are connected to a Netskope data plane in New York where your company’s headquarters is located. What is a valid reason for this behavior?

• A. The Netskope Client’s on-premises detection check failed
• B. The Netskope Client’s default DNS over HTTPS call is failing
• C. The closest Netskope data plane to San Francisco is unavailable
• D. The Netskope Client’s DNS call to Secure Forwarder is failing