Online Access Free NSK200 Practice Test

Your company wants to know if there has been any unusual user activity. In the UI, you go to Skope IT - > Alerts.
Which two types of alerts would you filter to find this information? (Choose two.)

• A.Alert type = policy
• B.Alert type = malware
• C.Alert type = uba
• D.Alert type = anomaly

You are troubleshooting an issue with Microsoft where some users complain about an issue accessing OneDrive and SharePoint Online. The configuration has the Netskope client deployed and active for most users, but some Linux machines are routed to Netskope using GRE tunnels. You need to disable inspection for all users to begin troubleshooting the issue.
In this scenario, how would you accomplish this task?

• A.Create a Do Not Decrypt SSL policy for OneDrive.
• B.Create a Real-time Protection policy to isolate Microsoft 365.
• C.Create a Do Not Decrypt SSL policy for the Microsoft 365 App Suite.
• D.Create a steering exception for the Microsoft 365 domains.

You are provisioning Netskope users from Okta with SCIM Provisioning, and users are not showing up in the tenant. In this scenario, which two Netskope components should you verify first In Okta for accuracy?
(Choose two.)

• A.IdP Entity ID
• B.SCIM server URL
• C.Netskope SAML certificate
• D.OAuth token

Review the exhibit.

You are troubleshooting a Netskope client for user Clarke which remains in a disabled state after being installed. After looking at various logs, you notice something which might explain the problem. The exhibit is an excerpt from the nsADImporterLog.log.
Referring to the exhibit, what is the problem?

• A.The Active Directory user is not synchronized to the Netskope tenant.
• B.The client was not Installed with administrative privileges.
• C.This is normal; it might take up to an hour to be enabled.
• D.The client traffic is decrypted by a network security device.

Review the exhibit.
add log-upload syslogng parserconfig set log-upload syslogng parserconfig 0 logsource < log-source > You are asked to deploy a virtual appliance OPLP to accept syslog messages directly from the enterprise Palo Alto Networks firewall. You believe that you have configured the OPLP to accept the firewall logs, yet they are not appearing in Risk Insights. Referring to the exhibit, which parser name would be required to complete the new configuration?

• A.squid
• B.panw-syslog
• C.custom-csv
• D.sfwder