Discuss Netskope NSK101 Exam Topic 5 Question 37

Click the Exhibit button.

Referring to the exhibit, what are two recommended steps to be set on the perimeter device to monitor IPsec tunnels to a Netskope data plane? (Choose two.)

AEnable IKE Dead Peer Detection (DPD) for each tunnel.

BSend ICMP requests to the Netskope location's Probe IP

CSend HTTP requests to the Netskope location's Probe IP.

DSend ICMP requests to the Netskope location's proxy IPs.

Suggested Answer: A, B

To monitor IPsec tunnels to a Netskope data plane, it is essential to ensure the stability and responsiveness of the tunnels. The recommended steps involve enabling monitoring mechanisms that detect and respond to tunnel failures. Here's a detailed explanation of the two recommended steps:

Enable IKE Dead Peer Detection (DPD) for each tunnel:

Implementation: Configure DPD in the IPsec settings of the perimeter device. This ensures that if the Netskope data plane is unreachable, the tunnel is automatically terminated and re-negotiated.

Send ICMP requests to the Netskope location's Probe IP:

Implementation: Set up regular ICMP requests (ping) from the perimeter device to the Netskope Probe IPs. This allows for continuous monitoring of the tunnel's health and immediate detection of connectivity issues.

REST API v2 Overview - Netskope Knowledge Portal

Using the REST API v2 dataexport Iterator Endpoints - Netskope Knowledge Portal

Using the REST API v2 UCI Impact Endpoints - Netskope Knowledge Portal

Get Premium NSK101 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

28 comments · newest first

Royal 10 months ago

I agree with A, but I'm not sure about B.

Lucina 10 months ago

Wait, why would we send HTTP requests? Seems off.

Robt 10 months ago

I think C could work too, but not as reliable as A.

Elly 10 months ago

D is a solid choice for monitoring, I’d go with that!

Beckie 10 months ago

Definitely A and B, those are standard practices.

Edison 11 months ago

I believe sending ICMP requests to the Netskope location's proxy IPs might be the right choice, but I need to double-check my notes on that.

Denae 11 months ago

I'm a bit confused about whether to send ICMP or HTTP requests. I feel like both could be relevant, but I can't recall which is more appropriate.

Karma 11 months ago

I remember practicing a question like this, and I think sending ICMP requests to the Probe IP could be a good option.

Narcisa 11 months ago

I think enabling IKE Dead Peer Detection is definitely one of the steps, but I'm not sure about the second one.

Kanisha 12 months ago

This is a good one. I'll focus on understanding the purpose of the IPsec tunnels and the role of the Netskope data plane. That should help me identify the most appropriate monitoring steps.

Enola 12 months ago

I'm a little confused by the wording of this question. Let me re-read it a few times and see if I can break down the key details before making my selections.

Alba 12 months ago

Okay, I've got this. Enabling IKE Dead Peer Detection and sending ICMP requests to the Netskope location's Probe IP are the two recommended steps here. Time to mark those answers and move on.

Iola 1 year ago

Hmm, I'm a bit unsure about this one. I'll need to review my notes on IPsec and Netskope to make sure I understand the concepts before deciding on the best approach.

Bethanie 1 year ago

This looks like a pretty straightforward networking question. I'd start by carefully reading through the options and thinking about which ones would be most effective for monitoring IPsec tunnels.

Krystina 1 year ago

I believe sending HTTP requests and ICMP requests to the Probe IP would be more effective for monitoring the IPsec tunnels.

Elfrieda 1 year ago

Hmm, this is a tricky one. I'm tempted to pick C just to mix things up, but A and B seem like the safest bet. Gotta love these certification exams - always keeping us on our toes!

Layla 1 year ago

↳ replying to Elfrieda

User 2: Yeah, I agree. C seems risky.

Daron 1 year ago

↳ replying to Elfrieda

User 1: I think A and B are the way to go.

Ernest 1 year ago

I was thinking A and D too. Can't go wrong with the classic ICMP tests. No need to overcomplicate things.

Barney 1 year ago

C is a bit odd - why HTTP requests? I'd go with A and D to keep an eye on the Netskope infrastructure.

Sherita 1 year ago

Definitely A and B. Monitoring IPsec tunnels is critical, and DPD plus ICMP checks are standard practice.

Quentin 1 year ago

↳ replying to Sherita

B) Send ICMP requests to the Netskope location's Probe IP

Tu 1 year ago

↳ replying to Sherita

A) Enable IKE Dead Peer Detection (DPD) for each tunnel.

Eulah 1 year ago

↳ replying to Sherita

B) Send ICMP requests to the Netskope location's Probe IP

Kallie 1 year ago

↳ replying to Sherita

A) Enable IKE Dead Peer Detection (DPD) for each tunnel.

Tandra 1 year ago

I'm not sure about that, I think it might be C and D instead.

Angella 1 year ago

I agree with James, enabling IKE Dead Peer Detection and sending ICMP requests to the Probe IP make sense.

James 1 year ago

I think the answer is A and B.

Netskope NSK101 Exam - Topic 5 Question 37 Discussion