Question 1

You are troubleshooting an issue with Microsoft where some users complain about an issue accessing OneDrive and SharePoint Online. The configuration has the Netskope client deployed and active for most users, but some Linux machines are routed to Netskope using GRE tunnels. You need to disable inspection for all users to begin troubleshooting the issue. In this scenario, how would you accomplish this task?

Options :

A : Create a Real-time Protection policy to isolate Microsoft 365.

B : Create a Do Not Decrypt SSL policy for the Microsoft 365 App Suite.

C : Create a steering exception for the Microsoft 365 domains.

D : Create a Do Not Decrypt SSL policy for OneDrive.

Answer: B

Question 2

Your customer is concerned aboutmalware in their AWS S3 buckets. What two actions would help with this scenario? (Choose two.)

Options :

A : Create a real-time policy to block malware uploads to their AWS instances.

B : Enable Threat Protection (Malware Scan) for all of their AWS instances to Identify malware.

C : Create an API protection policy to quarantine malware in their AWS S3 buckets.

D : Create a threatprofile to quarantine malware in their AWS S3 buckets.

Answer: B,C

Question 3

You are configuring GRE tunnels from a Palo Alto Networks firewall to a Netskope tenant with the Netskope for Web license enabled. Your tunnel is up as seen from the Netskope dashboard. You are unable to ping hosts behind the Netskope gateway. Which two statements are true about this scenario? (Choose two.)

Options :

A : You need to call support to enable the GRE POP selection feature.

B : Netskope only supports Web traffic through the tunnel.

C : You can only ping the probe IP provided by Netskope.

D : There is no client installed on the source hosts in your network.

Answer: B,C

Question 4

Your customer has deployed the Netskope client to secure their Web traffic. Recently, they have enabled Cloud Firewall (CFW) to secure all outbound traffic for their endpoints. Through a recent acquisition, they must secure all outbound traffic at several remote offices where they have access to the local security stack (routers and firewalls). They cannot install the Netskope client.

Options :

A : They can configure Reverse Proxy integrated with their IdP.

B : They can deploy Netskope’s DPOP to steer the targeted traffic to the Netskope Security Cloud.

C : They can use IPsec and GRE tunnels with Cloud Firewall.

D : They can secure the targeted outbound traffic using Netskope’s Cloud Threat Exchange (CTE).

Answer: C

Question 5

Recently your company implemented Zoom for collaboration purposes and you are attempting to inspect the traffic with Netskope. Your initial attempt reveals that you are not seeing traffic from the Zoom client that is used by all users. You must ensure that this traffic is visible to Netskope. In this scenario, which two steps must be completed to satisfy this requirement? (Choose two.)

Options :

A : Create a steering exception for Zoom to ensure traffic is reaching Netskope.

B : Create a Do Not Decrypt SSL policy for the Zoom application suite.

C : Remove the Zoom certificate-pinned application from the default steering configuration.

D : Remove the default steering exception for the Web Conferencing Category.

Answer: C,D