Netskope NSK200 Exam - Topic 1 Question 12 Discussion

Actual exam question for Netskope's NSK200 exam

Question #: 12
Topic #: 1

You are troubleshooting an issue with Microsoft where some users complain about an issue accessing OneDrive and SharePoint Online. The configuration has the Netskope client deployed and active for most users, but some Linux machines are routed to Netskope using GRE tunnels. You need to disable inspection for all users to begin troubleshooting the issue.

In this scenario, how would you accomplish this task?

ACreate a Real-time Protection policy to isolate Microsoft 365.

BCreate a Do Not Decrypt SSL policy for the Microsoft 365 App Suite.

CCreate a steering exception for the Microsoft 365 domains.

DCreate a Do Not Decrypt SSL policy for OneDrive.

Show Suggested Answer

Suggested Answer: A

The Netskope client can be disabled by the administrator from the Netskope console. This is useful for troubleshooting or maintenance purposes. When the client is disabled by the administrator, it shows the status as ''Admin Disabled'' and does not apply any policies or steer any traffic. The user cannot enable the client unless the administrator enables it from the console.The other options are not valid reasons for the client to be in an ''Admin Disabled'' state.Reference: Netskope Client Status1, Enable or Disable Netskope Client2

by Ozell at Mar 16, 2024, 11:17 AM

Limited Time Offer

25%

Off

Get Premium NSK200 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Nobuko

6 months ago

Not sure if just disabling inspection will fix the issue, though.

upvoted 0 times

...

Frederic

6 months ago

C could work too, but B feels more straightforward.

upvoted 0 times

...

Reita

6 months ago

Wait, why are Linux machines even involved in this? Seems odd.

upvoted 0 times

...

Chauncey

7 months ago

Definitely agree with B! No decryption for Microsoft 365 is key.

upvoted 0 times

...

Verdell

7 months ago

I think option B is the best choice here.

upvoted 0 times

...

Christa

7 months ago

I feel like the Do Not Decrypt SSL policy for the Microsoft 365 App Suite might be the safest bet to start troubleshooting effectively.

upvoted 0 times

...

Ashton

7 months ago

I'm a bit confused about the difference between the Do Not Decrypt SSL policies. Should we apply it to the entire Microsoft 365 suite or just OneDrive?

upvoted 0 times

...

Taryn

7 months ago

I think we practiced a similar question where we had to create exceptions for Microsoft services. Maybe a steering exception could work?

upvoted 0 times

...

Teri

8 months ago

I remember we discussed creating policies for SSL decryption in our last session, but I'm not entirely sure which one applies here.

upvoted 0 times

...

Kaitlyn

8 months ago

Wait, I'm a little confused. Isn't the goal to disable inspection for all users? Creating a Real-time Protection policy to isolate Microsoft 365 seems like it might not achieve that. I'm leaning towards option C, but I'll double-check the details.

upvoted 0 times

...

Yong

8 months ago

Okay, I've got this. The key is to disable inspection for all users, so creating a Do Not Decrypt SSL policy for the entire Microsoft 365 App Suite is the way to go. Option B is the answer here.

upvoted 0 times

...

Tamesha

8 months ago

Hmm, I'm a bit unsure about this one. Do I need to create a policy specifically for OneDrive, or can I just do a broader exception for the entire Microsoft 365 suite? I'll have to think this through carefully.

upvoted 0 times

...

Adaline

8 months ago

This seems like a straightforward question about disabling inspection for Microsoft 365 services. I think I'll go with option C and create a steering exception for the Microsoft 365 domains.

upvoted 0 times

...

Cassi

8 months ago

I'm a little confused by this question. I don't always see the same icons in different email programs. Maybe I should try to remember some of the other common attachment symbols just in case.

upvoted 0 times

...

Chaya

8 months ago

This seems like a pretty straightforward question. I'd focus on the key elements of planning for a new or changed service, like the existing service levels and ensuring proper testing is done.

upvoted 0 times

...

King

8 months ago

B seems like the right answer to me. The change of control clause is designed to provide job security and maintain your pay and benefits if the company goes through a major transition like a merger or acquisition.

upvoted 0 times

...

Gianna

1 year ago

I'm just glad I don't have to deal with this Netskope stuff. Sounds like a real headache!

upvoted 0 times

...

Gaynell

1 year ago

Option C, for sure. Steering exceptions are the way to go - it's the 'do not disturb' setting for Microsoft 365 apps.

upvoted 0 times

...

Melinda

1 year ago

Personally, I'd go with option D. A Do Not Decrypt SSL policy for OneDrive sounds like it would do the trick. Plus, it's more specific than the other options.

upvoted 0 times

Diane

11 months ago

Let's go ahead and create that Do Not Decrypt SSL policy for OneDrive then.

upvoted 0 times

...

Mari

11 months ago

That makes sense, focusing on OneDrive specifically should help troubleshoot the issue.

upvoted 0 times

...

Azzie

11 months ago

I agree, a Do Not Decrypt SSL policy for OneDrive seems like the most targeted solution.

upvoted 0 times

...

Hoa

12 months ago

Option D sounds like the best choice.

upvoted 0 times

...

Jaclyn

1 year ago

Hold on, guys. What about option A? A Real-time Protection policy to isolate Microsoft 365 could work too, right? This seems like a tricky issue.

upvoted 0 times

Jill

11 months ago

Alright, let's disable inspection for all users by creating a steering exception for the Microsoft 365 domains. That should help us troubleshoot the issue.

upvoted 0 times

...

Roosevelt

11 months ago

Let's go with option C and create a steering exception for the Microsoft 365 domains to troubleshoot the problem.

upvoted 0 times

...

Nikita

11 months ago

I agree, option C sounds like the most appropriate solution in this case. Let's go ahead and create that steering exception.

upvoted 0 times

...

Gilma

12 months ago

I agree, creating a steering exception for the Microsoft 365 domains could help resolve the issue faster.

upvoted 0 times

...

Katina

12 months ago

I think option C might be the best choice here. Creating a steering exception for the Microsoft 365 domains could help resolve the issue.

upvoted 0 times

...

Vanna

12 months ago

Option A could work, but I think creating a steering exception for the Microsoft 365 domains might be more effective.

upvoted 0 times

...

Dong

1 year ago

Hmm, I'm not sure about that. Wouldn't option B, creating a Do Not Decrypt SSL policy for the Microsoft 365 App Suite, be a better solution?

upvoted 0 times

Theola

11 months ago

User 4: Sounds like a plan. Let's disable inspection for all users and see if that fixes the problem.

upvoted 0 times

...

Luis

12 months ago

User 3: I agree, let's go ahead and implement that solution and see if it works.

upvoted 0 times

...

Kris

1 year ago

User 2: That sounds like a good idea. Let's try that out and see if it resolves the issue.

upvoted 0 times

...

Geoffrey

1 year ago

User 1: I think we should go with option B, create a Do Not Decrypt SSL policy for the Microsoft 365 App Suite.

upvoted 0 times

...

Jaime

1 year ago

I think option C is the way to go. Creating a steering exception for Microsoft 365 domains sounds like the right approach to disable inspection for all users.

upvoted 0 times