Free NSK101 sample questions

Correct answer: Add `ehr.clinic.internal` as a domain exception in the Steering Configuration.

Adding a domain to the exceptions list in the Steering Configuration instructs the Netskope client on the endpoint to not steer traffic destined for that domain to the Netskope cloud. The traffic will go directly to the destination, completely bypassing the Netskope proxy. This is the correct method for handling applications that are incompatible with inspection.

Correct answer: False

The statement is false. While Netskope provides a baseline CCI score based on over 50 objective criteria, administrators can override this score. They can add business context, such as whether the app is company-sanctioned or has undergone an internal security review, to adjust the CCI score to reflect the organization's specific risk posture for that application.

Correct answer: Threat Exchange Module

The Threat Exchange module is specifically designed for sharing threat intelligence, such as malicious file hashes and URLs, between Netskope and other security platforms (EDR, firewalls, etc.). When Netskope ATP identifies a new piece of malware, Threat Exchange can automatically push its hash to integrated tools to enable immediate, ecosystem-wide blocking.

Correct answer: Application Events

Application Events in Skope IT provide detailed, decoded logs of activities within sanctioned and unsanctioned cloud applications. A DLP violation on a OneDrive share would be logged here with the activity 'Share', the application 'OneDrive', the specific DLP profile that was triggered (e.g., 'PCI-DSS High'), and the action taken ('Block'). This is the most direct and detailed source for verification.

Correct answer: SCIM

SCIM (System for Cross-domain Identity Management) is an open standard designed specifically for automating the exchange of user identity information between identity domains or IT systems. When configured, Okta can act as a SCIM client to automatically create, update, and delete users and groups in the Netskope tenant (the SCIM server), ensuring the user directory is always synchronized.

Correct answer: Netskope Digital Experience Management (DEM)

Netskope Digital Experience Management (DEM) is specifically designed to provide deep visibility into the entire service delivery path. It can measure latency and performance from the user's device, across the local network, through the WAN and the Netskope NewEdge network, all the way to the application. This allows administrators to pinpoint exactly where performance degradation is occurring.

Correct answer: 'User' applies to the owner of the content being accessed, while 'Source User' applies to the person initiating the traffic.

This is the core distinction. 'Source User' refers to the identity of the user whose device is generating the network traffic being inspected by Netskope. 'User' refers to the contextual owner of the data or object being interacted with. For example, if 'user_A' (Source User) tries to access a file in 'user_B's OneDrive, a policy could be written to apply based on 'user_B' (User) being the owner of that content.

Correct answers: A DLP profile that identifies PII and proprietary research data identifiers.; A real-time protection policy that applies the DLP profile to 'Post' or 'Upload' activities for the 'Generative AI' app category.

A DLP profile is the core component that defines the sensitive data to be protected. It must be configured with the appropriate data identifiers (pre-defined or custom) to detect PII and research data.

The real-time protection policy is the enforcement mechanism. It links the 'who' (students), 'what' (the DLP profile), 'where' (Generative AI apps), and 'how' (Post/Upload activities) to enforce the control in real-time.

Correct answer: Create a Real-time Protection policy that blocks access to the 'File Storage' category when the CCI score is less than 50.

This is the most efficient and scalable solution. By creating a single Real-time Protection policy that uses both 'App Category' and 'CCI Score' as criteria, the administrator can create a dynamic rule. Any application that Netskope classifies in that category and has a score below the threshold will be automatically blocked without any manual intervention.

Correct answer: On Wednesday, when the next daily scan runs and discovers the file.

API-enabled Protection for malware scanning operates on the schedule defined in the policy. Since the policy is configured for a daily scan, the malicious file uploaded on Tuesday will not be discovered and quarantined until the next scheduled scan runs on Wednesday. This highlights the near-real-time nature of scheduled API scans versus the true real-time protection of an inline deployment.