Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Netskope Exam NSK200 Topic 1 Question 18 Discussion

Actual exam question for Netskope's NSK200 exam
Question #: 18
Topic #: 1
[All NSK200 Questions]

Your learn is asked to Investigate which of the Netskope DLP policies are creating the most incidents. In this scenario, which two statements are true? (Choose two.)

Show Suggested Answer Hide Answer
Suggested Answer: B, C

There are two possible scenarios that would cause the behavior of files containing test data for credit cards not triggering DLP events when uploaded to Dropbox. One scenario is that the DLP rule has the severity threshold set to a value higher than the number of occurrences. This means that the rule will only trigger an event if the number of matches for the sensitive data exceeds the specified threshold. For example, if the rule has a severity threshold of 10 and the file contains only 5 credit card numbers, then no event will be generated. To fix this, you can lower the severity threshold or remove it altogether. The other scenario is that the credit card numbers in your test data are invalid 16-digit numbers. This means that the numbers do not pass the Luhn algorithm check, which is a validation method used by Netskope DLP to detect valid credit card numbers. For example, if the number is 1234-5678-9012-3456, then it is not a valid credit card number and will not be detected by Netskope DLP. To fix this, you can use valid test credit card numbers that pass the Luhn algorithm check. The other options are not valid scenarios for this behavior. The Netskope client is not steering Dropbox traffic is not a valid scenario because there are corresponding page events, which means that the traffic is being steered to Netskope.There is no API protection configured for Dropbox is not a valid scenario because API protection is not required for DLP detection on file uploads, which are handled by real-time protection.Reference:DLP Rule Settings1,Credit Card Number Detection2


Contribute your Thoughts:

Renay
19 days ago
I'm just hoping the exam doesn't ask me to 'Skope' out the answers. That would be a real 'net' loss.
upvoted 0 times
...
Jess
20 days ago
I'm leaning towards B and C as well. The Analyze feature and Reporting options sound like the way to go.
upvoted 0 times
...
Matt
24 days ago
This is a tricky one, but I'm going with B and C. Gotta love those Netskope features!
upvoted 0 times
...
Hillary
1 months ago
A and D seem to be the correct answers. The Skope IT Applications and Alerts tabs should show the top DLP policies.
upvoted 0 times
Bettye
26 days ago
So, we can use both tabs to investigate which Netskope DLP policies are creating the most incidents.
upvoted 0 times
...
Cammy
1 months ago
Yes, I agree. The Skope IT Alerts tab should also show the top DLP policies.
upvoted 0 times
...
Rolland
1 months ago
I think A and D are correct. The Skope IT Applications tab should list the top DLP policies.
upvoted 0 times
...
...
Arlene
2 months ago
I'm not sure about option B and C. Can someone explain why they think those are true?
upvoted 0 times
...
Elise
2 months ago
I agree with Kristofer. Option D seems like it could also be true since it mentions the Skope IT Alerts tab.
upvoted 0 times
...
Roy
2 months ago
B and C are definitely true. I can see the top DLP policies triggered and create a report to analyze the incidents.
upvoted 0 times
Polly
1 months ago
The Skope IT Applications tab is also handy for listing the top DLP policies triggering incidents.
upvoted 0 times
...
Minna
1 months ago
I always use the Reporting feature to create detailed reports on incidents. It's so useful.
upvoted 0 times
...
Aliza
1 months ago
I agree, the Analyze feature is really helpful in identifying the top DLP policies.
upvoted 0 times
...
Jenise
1 months ago
B and C are definitely true. I can see the top DLP policies triggered and create a report to analyze the incidents.
upvoted 0 times
...
...
Kristofer
2 months ago
I think option A is true because it mentions the Skope IT Applications tab.
upvoted 0 times
...

Save Cancel