Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Netskope NSK200 Exam - Topic 1 Question 59 Discussion

While most Web and SaaS traffic is decrypted for inspection, you are asked to prevent a certain host on the network from SSL decryption for privacy purposes.
A) Create a steering exception for the host.
B) Create a Real-time Protection policy, select the host, and choose to block SSL decryption.
C) Create a Source Network Location for a Do Not Decrypt SSL policy.
D) Add the host to the certificate-pinned application list.

Netskope NSK200 Exam - Topic 1 Question 59 Discussion

Actual exam question for Netskope's NSK200 exam
Question #: 59
Topic #: 1
[All NSK200 Questions]

While most Web and SaaS traffic is decrypted for inspection, you are asked to prevent a certain host on the network from SSL decryption for privacy purposes.

Show Suggested Answer Hide Answer
Suggested Answer: A

Creating a steering exception for the host is the appropriate action to prevent SSL decryption on specific network traffic. Steering exceptions allow you to bypass decryption for designated hosts, which is useful for privacy-sensitive scenarios.


by Hyman at Jul 19, 2026, 06:12 PM

Limited Time Offer

25%

Off

Get Premium NSK200 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Mabel
1 day ago
Definitely need to protect that host's privacy!
upvoted 0 times
...
Kerry
6 days ago
C sounds right for a Do Not Decrypt policy.
upvoted 0 times
...
Ngoc
11 days ago
Wait, can we really just block SSL decryption like that?
upvoted 0 times
...
Dorathy
17 days ago
I think option B is more effective.
upvoted 0 times
...
Marcelle
22 days ago
Steering exception is the way to go!
upvoted 0 times
...
Denae
27 days ago
Adding the host to the certificate-pinned application list seems like a good idea, but I’m not clear on how that affects SSL traffic overall.
upvoted 0 times
...
Phillip
1 month ago
I feel like creating a Source Network Location for a Do Not Decrypt policy could be the right approach, but I need to double-check the steps.
upvoted 0 times
...
Mari
1 month ago
I think option B sounds familiar; we practiced blocking SSL decryption in a lab, but I can't recall if it was specifically for a single host.
upvoted 0 times
...
Margret
1 month ago
I remember we discussed steering exceptions in class, but I'm not entirely sure how to implement it for just one host.
upvoted 0 times
...

Save Cancel