Question 1

Review the exhibit.

You want to create a custom URL category to apply a secure Web gateway policy combining your own list of URLs and Netskope predefined categories. In this scenario, which task must be completed?

Options :

A : Add the URL list to the Client configuration.

B : Add the URL list to a Custom category.

C : Add the URL list to a Steering configuration.

Answer: B

Question 2

The director of IT asks for confirmation If your organization's Web traffic would be blocked when the Netskope client fails. In this situation, what would confirm the fail close status?

Options :

A : Perform a right-click on the Netskope client icon using your mouse.

B : Review the nsdebuglog.log.

C : View Application events.

D : Review user settings.

Answer: B

Question 3

Your customer is concerned aboutmalware in their AWS S3 buckets. What two actions would help with this scenario? (Choose two.)

Options :

A : Create a real-time policy to block malware uploads to their AWS instances.

B : Enable Threat Protection (Malware Scan) for all of their AWS instances to Identify malware.

C : Create an API protection policy to quarantine malware in their AWS S3 buckets.

D : Create a threatprofile to quarantine malware in their AWS S3 buckets.

Answer: B,C

Question 4

You are configuring GRE tunnels from a Palo Alto Networks firewall to a Netskope tenant with the Netskope for Web license enabled. Your tunnel is up as seen from the Netskope dashboard. You are unable to ping hosts behind the Netskope gateway. Which two statements are true about this scenario? (Choose two.)

Options :

A : You need to call support to enable the GRE POP selection feature.

B : Netskope only supports Web traffic through the tunnel.

C : You can only ping the probe IP provided by Netskope.

D : There is no client installed on the source hosts in your network.

Answer: B,C

Question 5

Your customer has deployed the Netskope client to secure their Web traffic. Recently, they have enabled Cloud Firewall (CFW) to secure all outbound traffic for their endpoints. Through a recent acquisition, they must secure all outbound traffic at several remote offices where they have access to the local security stack (routers and firewalls). They cannot install the Netskope client.

Options :

A : They can configure Reverse Proxy integrated with their IdP.

B : They can deploy Netskope’s DPOP to steer the targeted traffic to the Netskope Security Cloud.

C : They can use IPsec and GRE tunnels with Cloud Firewall.

D : They can secure the targeted outbound traffic using Netskope’s Cloud Threat Exchange (CTE).

Answer: C