Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Netskope NSK200 Exam - Topic 5 Question 60 Discussion

Posted by Maynard on Aug 19, 2026 at 05:39 AM

Review the exhibit.

You are at the Malware Incident page. A virus was detected by the Netskope Heuristics Engine. Your security team has confirmed that the virus was a test data file You want to allow the security team to use this file

Referring to the exhibit, which two statements are correct? (Choose two.)

Suggested Answer: A, C

To allow the security team to use the test data file that was detected as a virus by the Netskope Heuristics Engine, the following two steps are correct:

Click the ''Add To File Filter'' button to add the IOC to a file list. This will exclude the file from future malware scans and prevent false positive alerts.The file list can be managed in the Settings > File Filter page1.

Click the ''Lookup VirusTotal'' button to verify if this IOC is a false positive. This will open a new tab with the VirusTotal report for the file hash. VirusTotal is a service that analyzes files and URLs for viruses, worms, trojans, and other kinds of malicious content.The report will show how many antivirus engines detected the file as malicious and provide additional information about the file2.

https://docs.netskope.com/en/netskope-help/admin-console/incidents/


Get Premium NSK200 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
12 comments · newest first
DA
Dan 3 days ago
Wait, is it really safe to just mark it as safe?
AU
Audrie 8 days ago
I think A is also a good option.
DO
Dorethea 13 days ago
Definitely B and C! Makes the most sense.
CE
Celestina 18 days ago
I don't think A is necessary if we already confirmed it's a test file.
AN
Anglea 23 days ago
I agree with C, always check VirusTotal first!
EL
Eladia 29 days ago
Wait, is it really safe to just mark it as safe? Sounds risky!
PE
Pearly 1 month ago
I think A is also a good option, but not sure about D.
MY
Myra 1 month ago
Definitely B and C, those are the right moves.
BR
Brianne 1 month ago
I definitely recall something about updating file hash lists, so option D could be relevant, but I need to double-check that.
PO
Portia 2 months ago
I'm a bit confused about whether we should contact CrowdStrike or just handle it internally. Option B seems plausible, but I’m not confident.
SU
Susy 2 months ago
I remember practicing a question similar to this where we had to verify a file's status. I feel like option C might be the correct choice here.
SH
Shantell 2 months ago
I think option A sounds familiar, but I'm not entirely sure if that's the right step to take first.
0/2000 characters

Save Cancel