Certified Cloud Security Integrator Exam Questions PDF download

QUESTION: 6

Review the exhibit.

You are at the Malware Incident page. A virus was detected by the Netskope Heuristics Engine. Your security team has confirmed that the virus was a test data file You want to allow the security team to use this file

Referring to the exhibit, which two statements are correct? (Choose two.)

Click the "Add To File Filter button to add the IOC to a file list.
Contact the CrowdStrike administrator to have the file marked as safe.
Click the ''Lookup VirusTotal" button to verify if this IOC is a false positive.
Create a malware detection profile and update the file hash list with the IOC.

Answer(s): A,C

Explanation:

To allow the security team to use the test data file that was detected as a virus by the Netskope Heuristics Engine, the following two steps are correct:

Click the "Add To File Filter" button to add the IOC to a file list. This will exclude the file from future malware scans and prevent false positive alerts. The file list can be managed in the Settings > File Filter page1.

Click the "Lookup VirusTotal" button to verify if this IOC is a false positive. This will open a new tab with the VirusTotal report for the file hash. VirusTotal is a service that analyzes files and URLs for viruses, worms, trojans, and other kinds of malicious content. The report will show how many antivirus engines detected the file as malicious and provide additional information about the file2.

https://docs.netskope.com/en/netskope-help/admin-console/incidents/

Reveal Solution Next Question

QUESTION: 7

Which object would be selected when creating a Malware Detection profile?

DLP profile
File profile
Domain profile
User profile

Answer(s): B

Explanation:

A file profile is an object that contains a list of file hashes that can be used to create a malware detection profile. A file profile can be configured as an allowlist or a blocklist, depending on whether the files are known to be benign or malicious. A file profile can be created in the Settings > File Profile page1. A malware detection profile is a set of rules that define how Netskope handles malware incidents. A malware detection profile can be created in the Policies > Threat Protection > Malware Detection Profiles page2. To create a malware detection profile, one needs to select a file profile as an allowlist or a blocklist, along with the Netskope malware scan option. The other options are not objects that can be selected when creating a malware detection profile.

Reveal Solution Next Question

QUESTION: 8

Your learn is asked to Investigate which of the Netskope DLP policies are creating the most incidents. In this scenario, which two statements are true? (Choose two.)

The Skope IT Applications tab will list the top five DLP policies.
You can see the top Ave DLP policies triggered using the Analyze feature
You can create a report using Reporting or Advanced Analytics.
The Skope IT Alerts tab will list the top five DLP policies.

Answer(s): B,C

Explanation:

To investigate which of the Netskope DLP policies are creating the most incidents, the following two statements are true:

You can see the top five DLP policies triggered using the Analyze feature. The Analyze feature allows you to create custom dashboards and widgets to visualize and explore your data. You can use the DLP Policy widget to see the top five DLP policies that generated the most incidents in a given time period3.

You can create a report using Reporting or Advanced Analytics. The Reporting feature allows you to create scheduled or ad-hoc reports based on predefined templates or custom queries. You can use the DLP Incidents by Policy template to generate a report that shows the number of incidents per DLP policy4. The Advanced Analytics feature allows you to run SQL queries on your data and export the results as CSV or JSON files. You can use the DLP_INCIDENTS table to query the data by policy name and incident count5.

The other two statements are not true because:

The Skope IT Applications tab will not list the top five DLP policies. The Skope IT Applications tab shows the cloud app usage and risk summary for your organization. It does not show any information about DLP policies or incidents6.

The Skope IT Alerts tab will not list the top five DLP policies. The Skope IT Alerts tab shows the alerts generated by various policies and profiles, such as DLP, threat protection, IPS, etc. It does not show the number of incidents per policy, only the number of alerts per incident7.

Reveal Solution Next Question

QUESTION: 9

You want to secure Microsoft Exchange and Gmail SMTP traffic for DLP using Netskope.
Which statement is true about this scenario when using the Netskope client?

Netskope can inspect outbound SMTP traffic for Microsoft Exchange and Gmail.
Enable Cloud Firewall to Inspect Inbound SMTP traffic for Microsoft Exchange and Gmail.
Netskope can inspect inbound and outbound SMTP traffic for Microsoft Exchange and Gmail.
Enable REST API v2 to Inspect inbound SMTP traffic for Microsoft Exchange and Gmail.

Answer(s): A

Explanation:

Netskope can inspect outbound SMTP traffic for Microsoft Exchange and Gmail using the Netskope client. The Netskope client intercepts the SMTP traffic from the user's device and forwards it to the Netskope cloud for DLP scanning. The Netskope client does not inspect inbound SMTP traffic, as this is handled by the cloud email service or the MTA. Therefore, option A is correct and the other options are incorrect.

Reference:

Configure Netskope SMTP Proxy with Microsoft O365 Exchange, Configure Netskope SMTP Proxy with Gmail, SMTP DLP, Best Practices for Email Security with SMTP proxy

Reveal Solution Next Question

QUESTION: 10

Your company needs to keep quarantined files that have been triggered by a DLP policy. In this scenario, which statement Is true?

The files are stofed remotely In your data center assigned In the Quarantine profile.
The files are stored In the Netskope data center assigned in the Quarantine profile.
The files are stored In the Cloud provider assigned In the Quarantine profile.
The files are stored on the administrator console PC assigned In the Quarantine profile.

Answer(s): B

Explanation:

When a policy flags a file to be quarantined, that file is placed in a quarantine folder and a tombstone file is put in the original location in its place. The quarantine folder is located in the Netskope data center assigned in the Quarantine profile. The Quarantine profile is configured in Settings > Threat Protection > API-enabled Protection. The quarantined file is zipped and protected with a password to prevent users from inadvertently downloading the file. Netskope then notifies the admin specified in the profile1. Therefore, option B is correct and the other options are incorrect.

Reference:

Quarantine - Netskope Knowledge Portal, Threat Protection - Netskope Knowledge Portal

Reveal Solution Next Question

Netskope Certified Cloud Security Integrator NSK200 Dumps in PDF

Free Netskope NSK200 Real Questions (page: 12)

QUESTION: 6

Explanation:

QUESTION: 7

Explanation:

QUESTION: 8

Explanation:

QUESTION: 9

Explanation:

Reference:

QUESTION: 10

Explanation:

Reference: