[2026] Netskope Certified Cloud Security Architect

문제1

A hospital has a patient form that they share with their patients over Gmail. The blank form can be freely shared among anyone. However, if the form has any information filled out. the document is considered confidential.
Which rule type should be used in the DLP profile to match such a document?

A. Use predefined DLP Rule(s) that match the patient name.

B. Use a dictionary rule for all your patient names.

C. Use fingerprint classification.

D. Use Exact Match with patient names

정답: C

설명: (Fast2test 회원만 볼 수 있음)

문제2

You receive a report from your endpoint team that a device may no longer be running the Netskope Client.
You only know the hostname of the machine in question. You want to remotely verify whether the client is still installed and steering traffic and which user is assigned to the device. In this scenario, how would you accomplish this task?

A. Under Skope IT Users, look at the Users Over Time graph for any anomalies.

B. Enable IP restrictions for a sanctioned application and see if any users report an access problem.

C. Under Skope IT Applications Events, query by hostname and determine the last event date and time.

D. Under the Netskope Client Devices page, search for the hostname in question and identify the current Client Status and User information.

정답: D

설명: (Fast2test 회원만 볼 수 있음)

문제3

Your company has a large number of medical forms that are allowed to exit the company when they are blank. If the forms contain sensitive data, the forms must not leave any company data centers, managed devices, or approved cloud environments. You want to create DLP rules for these forms.
Which first step should you take to protect these forms?

A. Use Netskope Secure Forwarder to create an ML Model of all forms

B. Use Netskope Secure Forwarder to create fingerprints of all forms.

C. Use Netskope Secure Forwarder to create EDM hashes of all forms.

D. Use Netskope Secure Forwarder to create an MIP tag for all forms.

정답: A

설명: (Fast2test 회원만 볼 수 있음)

문제4

You built a number of DLP profiles for different sensitive data types. If a file contains any of this sensitive data, you want to take the most restrictive policy action but also create incident details for all matching profiles.
Which statement is correct in this scenario?

A. Create a single Real-time Protection policy and include all of the DLP profiles; each matched profile will generate a unique DLP incident

B. Create a Real-time Protection policy for each DLP profile; all matched profiles will show up in a single DLP incident

C. Create a single Real-time Protection policy and include all of the DLP profiles; all matched profiles will show up in a single DLP incident.

D. Create a Real-time Protection policy for each DLP profile; each matched profile will generate a unique DLP incident.

정답: C

설명: (Fast2test 회원만 볼 수 있음)

문제5

You want to integrate with a third-party DLP engine that requires ICAP. In this scenario, which Netskope platform component must be configured?

A. Netskope Adapter

B. On-Premises Log Parser (OPLP)

C. Netskope Cloud Exchange

D. Secure Forwarder

정답: A

설명: (Fast2test 회원만 볼 수 있음)

문제6

A company needs to block access to their instance of Microsoft 365 from unmanaged devices. They have configured Reverse Proxy and have also created a policy that blocks login activity for the AD group " marketing-users " for the Reverse Proxy access method. During UAT testing, they notice that access from unmanaged devices to Microsoft 365 is not blocked for marketing users.
What is causing this issue?

A. The username in the name ID field does not have the " marketing-users " group name.

B. The username in the name ID field is not in the format of the e-mail address.

C. There is an invalid certificate in the SAML response.

D. There is a missing group name in the SAML response.

정답: A

설명: (Fast2test 회원만 볼 수 있음)

문제7

Given the following:

Which result does this Skope IT query provide?

A. The query returns all events of everyone except [email protected] downloading or uploading to or from the site " Amazon S3 " using the Netskope Client.

B. The query returns all events of [email protected] downloading or uploading to or from the site ' Amazon S3 " using the Netskope Client.

C. The query returns all events of [email protected] downloading or uploading to or from the application " Amazon S3 " using the Netskope Client.

D. The query returns all events of an IP address downloading or uploading to or from Amazon S3 using the Netskope Client.

정답: B

설명: (Fast2test 회원만 볼 수 있음)

문제8

You have enabled CASB traffic steering using the Netskope Client, but have not yet enabled a Real-time Protection policy. What is the default behavior of the traffic in this scenario?

A. Traffic will be blocked and logged.

B. Traffic will be allowed and logged.

C. Traffic will be blocked, but not logged.

D. Traffic will be allowed, but not logged.

정답: B

설명: (Fast2test 회원만 볼 수 있음)

문제9

You have an NG-SWG customer that currently steers all Web traffic to Netskope using the Netskope Client.
They have identified one new native application on Windows devices that is a certificate-pinned application.
Users are not able to access the application due to certificate pinning. The customer wants to configure the Netskope Client so that the traffic from the application is steered to Netskope and the application works as expected.
Which two methods would satisfy the requirements? (Choose two.)

A. Configure the SSL Do Not Decrypt policy to not decrypt traffic for domains used by the native application.

B. Tunnel traffic to Netskope and bypass traffic inspection at the Netskope proxy.

C. Bypass traffic using the bypass action in the Real-time Protection policy.

D. Configure domain exceptions in the steering configuration for the domains used by the native application.

정답: A,B

설명: (Fast2test 회원만 볼 수 있음)

Netskope Certified Cloud Security Architect - NSK300무료 덤프문제 풀어보기

우리와 연락하기

유용한 링크

최신 업데이트