Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Netskope NSK101 Exam - Topic 1 Question 12 Discussion

Posted by Albina on Jun 01, 2024 at 06:05 AM

You have applied a DLP Profile to block all Personally Identifiable Information data uploads to Microsoft 365 OneDrive. DLP Alerts are not displayed and no OneDrive-related activities are displayed in the Skope IT App Events table.

In this scenario, what are two possible reasons for this issue? (Choose two.)

Suggested Answer: C, D, E

The three technologies that describe the primary cloud service models as defined by the National Institute of Standards and Technology (NIST) are Platform as a Service (PaaS), Software as a Service (SaaS), and Infrastructure as a Service (IaaS). These service models are based on the type of computing capability that is provided by the cloud provider to the cloud consumer over a network. According to NIST, these service models have the following definitions:

Platform as a Service (PaaS): The capability provided to the consumer is to deploy onto the cloud infrastructure consumer-created or acquired applications created using programming languages, libraries, services, and tools supported by the provider. The consumer does not manage or control the underlying cloud infrastructure including network, servers, operating systems, or storage, but has control over the deployed applications and possibly configuration settings for the application-hosting environment.

Software as a Service (SaaS): The capability provided to the consumer is to use the provider's applications running on a cloud infrastructure. The applications are accessible from various client devices through either a thin client interface, such as a web browser (e.g., web-based email), or a program interface. The consumer does not manage or control the underlying cloud infrastructure including network, servers, operating systems, storage, or even individual application capabilities, with the possible exception of limited user-specific application configuration settings.

Infrastructure as a Service (IaaS): The capability provided to the consumer is to provision processing, storage, networks, and other fundamental computing resources where the consumer is able to deploy and run arbitrary software, which can include operating systems and applications. The consumer does not manage or control the underlying cloud infrastructure but has control over operating systems, storage, and deployed applications; and possibly limited control of select networking components (e.g., host firewalls).


Get Premium NSK101 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
43 comments · newest first
EL
Elena 10 months ago
Not sure about C, can DLP really be that location-dependent?
LA
Lazaro 11 months ago
Totally agree with A, that could definitely be the problem.
DY
Dyan 11 months ago
DLP policies not applying with IPsec? That's surprising!
NA
Narcisa 11 months ago
I think B is the issue here.
TH
Theola 11 months ago
A and C seem likely.
RE
Rebbeca 12 months ago
I vaguely recall that DLP policies might not work with IPsec steering, which makes option D worth considering as well.
FR
Fredric 12 months ago
I practiced a similar question where the location of the Netskope POP was crucial. So, option C seems plausible if the POP isn't local.
JE
Jesusa 12 months ago
I'm not entirely sure, but I think if the destination domain is excluded from decryption, it might affect DLP policies too. That could relate to option B.
BE
Bernardo 1 year ago
I remember something about exceptions in the Steering Configuration, so option A could be a reason for the DLP alerts not showing.
AL
Alysa 1 year ago
This seems straightforward. The problem is probably due to the Netskope POP not being in the local country, which would prevent the DLP policies from being applied. I'm confident I can nail this one.
DO
Dominga 1 year ago
Alright, I've got this. The issue is likely related to the DLP profile configuration, either with an exception or a decryption policy problem. I'll carefully evaluate the options and choose the two most likely causes.
DO
Dorothy 1 year ago
Wait, I'm a bit confused. The question mentions DLP policies and OneDrive, but it's not clear to me how those are related. I'll need to do some research to understand the connection.
LA
Laurel 1 year ago
Okay, let's see. The key things to focus on are the DLP profile, the lack of alerts, and the missing OneDrive activity. I think I have a strategy to approach this.
CR
Crista 1 year ago
Hmm, this seems like a tricky one. I'll need to carefully review the options and think through the potential reasons for the issue.
AN
Antonio 1 year ago
I'm pretty confident I know the answer here. The admin needs to have the right permissions, and the customer needs to explicitly allow the remote login. Seems straightforward enough.
JU
Jules 1 year ago
I'm not sure about that... but I feel like picking up a burger on the way home could also count as impulse buying? Maybe it's D?
TA
Tabetha 1 year ago
I'm leaning towards option D - creating two projects for each environment to match the two production regions. That seems like the most robust and scalable approach, even if it requires a bit more setup upfront.
RY
Ryan 1 year ago
The question is asking about the User Layer, so I'm guessing the correct answer is applications that don't modify the hardware or require boot-level drivers. I'll go with option A.
SE
Selma 1 year ago
I'm just gonna go with B and C. Excluding the destination domain from decryption and having the Netskope POP outside the local country both sound like they could cause this problem. I'm not even gonna try the IPsec option, that's just asking for trouble!
JI
Jin 1 year ago
↳ replying to Selma
User 4: Definitely, I wouldn't even consider the IPsec option in this scenario.
LA
Layla 1 year ago
↳ replying to Selma
User 3: I agree, those two options seem like the most likely culprits.
AR
Armanda 1 year ago
↳ replying to Selma
User 2: Yeah, excluding the destination domain from decryption and having the Netskope POP outside the local country could be causing the issue.
PA
Paulina 1 year ago
↳ replying to Selma
User 1: I think B and C are the possible reasons.
HA
Hannah 1 year ago
Haha, well if the Netskope POP is not in your local country, you might as well be trying to DLP your thoughts! But seriously, I think A and C are the correct answers here.
SH
Sharita 1 year ago
↳ replying to Hannah
Let's make sure the Cloud Storage category is not listed as an exception and verify the location of the Netskope POP.
AL
Alisha 1 year ago
↳ replying to Hannah
Maybe we should check the Steering Configuration and the location of the Netskope POP.
LO
Lorean 1 year ago
↳ replying to Hannah
I agree, A and C seem like the most likely reasons for the issue.
DE
Deja 1 year ago
Hmm, I'm leaning towards B and D. The decryption policy issue is a good one, and if IPsec is being used for steering, that could interfere with the DLP policies.
JO
Josphine 1 year ago
↳ replying to Deja
D) DLP policies do not apply when using IPsec as a steering option.
FR
Franchesca 1 year ago
↳ replying to Deja
Hmm, I'm leaning towards B and D. The decryption policy issue is a good one, and if IPsec is being used for steering, that could interfere with the DLP policies.
FA
Fatima 1 year ago
↳ replying to Deja
B) The destination domain is excluded from decryption in the decryption policy.
SH
Shaun 1 year ago
↳ replying to Deja
A) The Cloud Storage category is in the Steering Configuration as an exception.
TA
Tawna 1 year ago
I'm going with A and B. The Cloud Storage category being an exception in the Steering Configuration would definitely prevent the DLP policies from working, and the decryption policy exclusion makes sense too.
AL
Alethea 1 year ago
I'm not sure about option C and D. Can someone explain those to me?
TW
Twana 1 year ago
I agree with Elden. Option B could also be a reason if the destination domain is excluded from decryption.
EM
Emeline 2 years ago
I think B and C are the most likely reasons. If the destination domain is excluded from decryption, the DLP policies won't be applied, and if the Netskope POP is not in the local country, that could also prevent the DLP policies from working.
PE
Peter 1 year ago
↳ replying to Emeline
We should check those settings to see if that's the problem.
DE
Dexter 1 year ago
↳ replying to Emeline
So, it seems like both B and C could be causing the issue with the DLP policies.
SH
Sharen 1 year ago
↳ replying to Emeline
C) A Netskope POP is not in your local country and therefore DLP policies cannot be applied.
DE
Denny 1 year ago
↳ replying to Emeline
B) The destination domain is excluded from decryption in the decryption policy.
DA
Daren 1 year ago
↳ replying to Emeline
That's true, and if the Netskope POP is not in the local country, it could also be a reason.
RE
Renato 1 year ago
↳ replying to Emeline
I agree, if the destination domain is excluded from decryption, DLP policies won't work.
EL
Elden 2 years ago
I think option A could be a reason because the Cloud Storage category might be exempted.
0/2000 characters

Save Cancel