Discuss Netskope NSK200 Exam Topic 1 Question 8

Your customer has some managed Windows-based endpoints where they cannot add any clients or agents. For their users to have secure access to their SaaS application, you suggest that the customer use Netskope's Explicit Proxy.

Which two configurations are supported for this use case? (Choose two.)

AEndpoints can be configured to directly use the Netskope proxy.

BEndpoints must have separate steering configurations in the tenant settings.

CEndpoints must be configured in the device section of the tenant to interoperate with all proxies.

DEndpoints can be configured to use a Proxy Auto Configuration (PAC) file.

Suggested Answer: A, D

For the use case of managed Windows-based endpoints where no clients or agents can be added, you can suggest that the customer use Netskope's Explicit Proxy. Explicit Proxy is a method for steering traffic from any device to the Netskope Cloud using a proxy server. There are two supported configurations for this use case: Endpoints can be configured to directly use the Netskope proxy by setting the proxy settings in the browser or the operating system to point to the explicit proxy destination provided by Netskope. Endpoints can be configured to use a Proxy Auto Configuration (PAC) file by downloading a PAC file template from Netskope and modifying it according to the customer's needs. The PAC file can be hosted on-premises or on the cloud and distributed to the endpoints. The other options are not valid for this use case. Endpoints do not need separate steering configurations in the tenant settings, as they can use the same explicit proxy destination and port.Endpoints do not need to be configured in the device section of the tenant to interoperate with all proxies, as this is only required for reverse proxy mode.Reference:Explicit Proxy3, [Explicit Proxy over IPSec and GRE Tunnels]

Get Premium NSK200 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

24 comments · newest first

Mila 11 months ago

C seems off; it’s not about all proxies, right?

Toshia 11 months ago

Wait, can endpoints really use the Netskope proxy directly? Sounds odd.

Gladis 11 months ago

D is definitely a must-have for PAC files.

Nida 11 months ago

I think B is also important, but not sure about A.

Novella 11 months ago

A and D are the right choices!

Jesusita 12 months ago

I feel like the device section configuration is important for interoperability, but I’m not sure if it applies to this specific scenario.

Maurine 12 months ago

I practiced a similar question where we discussed steering configurations, but I can't recall if they need to be separate in this case.

Talia 12 months ago

I think endpoints can be configured to directly use the Netskope proxy, but I’m not confident about the details.

Farrah 1 year ago

I remember something about endpoints being able to use a PAC file for proxy settings, but I'm not entirely sure if that's the right choice here.

Erick 1 year ago

Okay, the question is asking which two configurations are supported. I'll need to evaluate each option and select the two that match the customer's requirements.

Theodora 1 year ago

Hmm, I'm a bit unsure about the differences between the configuration options. I'll need to carefully read through the details to understand which two are supported for this use case.

Brittni 1 year ago

This question seems straightforward. I'll focus on the key details about the customer's requirements and the supported configurations for the Netskope Explicit Proxy.

Jaime 1 year ago

Ah, I see. The customer can't add any clients or agents, so they need to use the Netskope Explicit Proxy. I think options A and D are the supported configurations based on the information provided.

Garry 1 year ago

I think option D is the way to go here. Creating a new virtual environment is the best way to test out this new package without messing with the main codebase. That's the approach I'm going to take on this exam question.

Jin 1 year ago

I'd say risk assessment is the way to go. That will give you the big picture to work from and help you prioritize the other security factors like resiliency and network topology.

Melissa 1 year ago

Okay, let me see here. Internal Content, KB Article, and Catalog Content all sound like valid options. I'm guessing External Content might be the one that's not valid, but I'll double-check to be sure.

Luther 1 year ago

I thought suppliers could be considered external too, since they don't work within the company. But I feel uncertain about what the question is looking for.

Roy 1 year ago

I feel a bit confused; wasn't there a scenario where acquiring 100% was also an option? I hope I recall that correctly.

Quentin 3 years ago

Yup, those are my thoughts too. The PAC file option is nice because it can centrally manage the proxy settings without having to configure each endpoint individually.

Bobbie 3 years ago

Definitely. So that leaves options A and D as the supported configurations. Configuring the endpoints to directly use the Netskope proxy or using a PAC file seem like the best bets here.

Lucy 2 years ago

↳ replying to Bobbie

D) Endpoints can be configured to use a Proxy Auto Configuration (PAC) file.

Johnetta 2 years ago

↳ replying to Bobbie

A) Endpoints can be configured to directly use the Netskope proxy.

Loreen 3 years ago

I agree. That rules out option C, since that involves configuring the endpoints in the device section of the tenant. And option B sounds like it would require some separate steering configuration, which they can't do.

Shalon 3 years ago

Hmm, this question seems pretty straightforward. The key here is that the customer can't install any additional clients or agents on the endpoints, so the options that require that are probably out.

Netskope NSK200 Exam - Topic 1 Question 8 Discussion