Netskope NSK101 問題集

質問 1：
You are setting up a real-time threat protection policy for patient zero to block previously unseen files until a benign verdict is produced by the Netskope Threat Protection Service. In this scenario, which two policy parameters must you configure? (Choose two)
A. block action
B. file type activity constraint
C. remediation profile
D. CCL destination criterion
正解：A,C
解説: (Topexam メンバーにのみ表示されます)

質問 2：
As an administrator, you are investigating an increase in the number of incidents related to compromised credentials. You are using the Netskope Compromised Credentials feature on your tenant to assess the situation. Which insights would you find when using this feature? (Choose two)
A. Compromised passwords
B. Affected managed applications
C. Compromised usernames
D. Breach information source
正解：C,D
解説: (Topexam メンバーにのみ表示されます)

質問 3：
In the Tenant III, which two methods would an administrator use to update a File Profile with malicious file hashes? (Choose two)
A. Upload a JSON file of malicious file hashes.
B. Upload a CSV file of malicious file hashes.
C. Create a Threat Protection Profile to define a block list of malicious files.
D. Input a list of malicious file hashes.
正解：B,D
解説: (Topexam メンバーにのみ表示されます)

質問 4：
What are two CASB inline interception use cases? (Choose two.)
A. scanning Dropbox for credit card information
B. running a retroactive scan for data at rest in Google Drive
C. blocking file uploads to a personal Box account
D. using the Netskope steering client to provide user alerts when sensitive information is posted in Slack
正解：C,D
解説: (Topexam メンバーにのみ表示されます)

質問 5：
You added a new private app definition and created a Real-time Protection policy to allow access for all users.
You have a user who reports that they are unable to access the application but all other applications work fine.
Which statement correctly describes how to troubleshoot this issue using the Netskope Web UI?
A. You can verify the user's policy, steering configuration, client status and other relevant details using DEM.
B. You can verity the user's policy, steering configuration, client status and other relevant details using the Advanced Debugging tools in the Netskoge Client.
C. You can verify the user's policy, steering configuration, client status and other relevant details using the Agg Discovery dashboard.
D. You can verify the user's policy, steering configuration, client status and other relevant details using the NPA Troubleshooter took
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 6：
You are working with a large retail chain and have concerns about their customer data. You want to protect customer credit card data so that it is never exposed in transit or at rest. In this scenario, which regulatory compliance standard should be used to govern this data?
A. SOC 3
B. PCI-DSS
C. ISO 27001
D. AES-256
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 7：
You are deploying TLS support for real-time Web and SaaS transactions. What are two secure implementation methods in this scenario? (Choose two.)
A. Downgrade to TLS 1.2 whenever possible.
B. Support TLS 1.2 only when 1.3 is not supported by the server.
C. Require TLS 1.3 for every server that accepts it.
D. Bypass TLS 1.3 because it is not widely adopted.
正解：B,C
解説: (Topexam メンバーにのみ表示されます)

質問 8：
You are asked to review files affected by malware in your organization. In this scenario, which two actions are possible and would be accessible from the Netskope UI -> Incidents --> Malware? (Choose two)
A. Determine the Detection Engine used to identify the malware.
B. Download the original malware file generating the alert to be analyzed by the SOC team
C. Remediate the compromised devices.
D. Identify the exposure of the file identified as malware.
正解：A,D
解説: (Topexam メンバーにのみ表示されます)

質問 9：
In which scenario would you use a SAML reverse proxy?
A. When there are multiple SAML IdPs in use and the SAML reverse proxy can help federate them all together.
B. When the API-enabled protection exceeds the Cloud App API usage limits and cannot be used anymore.
C. When the organization wants to perform inline inspection of cloud application traffic for roaming users that do not have the Netskope agent installed.
D. When PAC files or explicit proxies can be used to steer traffic to the Netskope platform.
正解：A
解説: (Topexam メンバーにのみ表示されます)