Discuss Netskope NSK300 Exam Topic 1 Question 32

Review the exhibit.

You are the proxy administrator for a medical devices company. You recently changed a pilot group of users from cloud app steering to all Web traffic. Pilot group users have started to report that they receive the error shown in the exhibit when attempting to access the company intranet site that is publicly available. During troubleshooting, you realize that this site uses your company's internal certificate authority for SSL certificates.

Which three statements describe ways to solve this issue? (Choose three.)

AImport the root certificate for your internal certificate authority into Netskope.

BBypass SSL inspection for the affected site(s).

CCreate a Real-time Protection policy to allow access.

DChange the SSL Error Settings from Block to Bypass in the Netskope tenant.

EInstruct the user to proceed past the error message

Suggested Answer: A, B, D

A . Import the root certificate for your internal certificate authority into Netskope:

This step ensures that Netskope recognizes and trusts SSL certificates issued by your company's internal certificate authority. By importing the root certificate, you enable proper SSL inspection and validation for internal sites.

B . Bypass SSL inspection for the affected site(s):

Since the intranet site uses your company's internal certificate authority, bypassing SSL inspection for this specific site allows users to access it without encountering SSL errors.

D . Change the SSL Error Settings from Block to Bypass in the Netskope tenant:

Adjusting the SSL Error Settings to ''Bypass'' allows users to proceed past SSL errors, including self-signed certificate errors. This ensures uninterrupted access to the intranet site.Reference:

Netskope Security Cloud Introductory Online Technical Training

Netskope Security Cloud Operation & Administration (NSCO&A) - Classroom Training

Netskope Cloud Security Certification Program

Get Premium NSK300 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

30 comments · newest first

Catina 10 months ago

Definitely need to create a Real-time Protection policy for this.

Eveline 10 months ago

Wait, can users really just proceed past the error? Sounds risky!

Brande 10 months ago

Import the root certificate into Netskope is a must!

Vicki 10 months ago

I think changing SSL Error Settings is a solid option.

Staci 10 months ago

Bypassing SSL inspection could work too.

Yasuko 11 months ago

I feel like instructing users to proceed past the error in option E is not a good long-term solution, but it could work temporarily.

Darell 11 months ago

I practiced a similar question where we had to adjust SSL settings. Changing the SSL Error Settings in option D could be a valid approach too.

Theron 11 months ago

I'm not entirely sure, but bypassing SSL inspection sounds familiar. I think option B might be a quick fix for the users.

Tawna 11 months ago

I remember we discussed the importance of importing root certificates in class. I think option A makes sense for this issue.

Albert 12 months ago

Changing the SSL Error Settings from Block to Bypass in the Netskope tenant? I'm not sure about that one. Feels like it could open up some vulnerabilities. I'll need to double-check the implications.

Reena 12 months ago

I like the idea of creating a Real-time Protection policy to allow access. That seems like a more secure solution than just telling users to ignore the error message.

Alishia 12 months ago

Hmm, I'm a bit confused. Do we really need to bypass SSL inspection for the affected site? That seems like it could create a security risk. I'll have to think this through.

Yolando 1 year ago

Okay, I think I've got this. The key is to import the root certificate for the internal CA into Netskope to avoid the SSL error. That should do the trick.

Samira 1 year ago

This seems like a tricky one. I'll need to carefully review the options and think through the implications of each approach.

Maybelle 1 year ago

Creating a Real-time Protection policy sounds like a good idea, but I'm not sure it's the best fix for this specific problem.

Nettie 1 year ago

↳ replying to Maybelle

E) Instruct the user to proceed past the error message

Pura 1 year ago

↳ replying to Maybelle

B) Bypass SSL inspection for the affected site(s).

Kerry 1 year ago

↳ replying to Maybelle

A) Import the root certificate for your internal certificate authority into Netskope.

Rachael 1 year ago

I think we should also change the SSL Error Settings from Block to Bypass in the Netskope tenant.

Thora 1 year ago

I agree with Shala. That seems like a logical solution to the issue.

Shala 1 year ago

I think we should import the root certificate for our internal certificate authority into Netskope.

Angelo 1 year ago

Haha, 'Instruct the user to proceed past the error message'? Really? That's just asking for trouble!

Anglea 1 year ago

↳ replying to Angelo

E) Instruct the user to proceed past the error message

Ardella 1 year ago

↳ replying to Angelo

B) Bypass SSL inspection for the affected site(s).

Reta 1 year ago

↳ replying to Angelo

A) Import the root certificate for your internal certificate authority into Netskope.

Judy 1 year ago

Bypassing SSL inspection seems like a risky move. I'd try the certificate import first before considering that.

Stevie 1 year ago

Definitely import the root certificate. That's the most straightforward solution to the SSL issue.

Han 1 year ago

↳ replying to Stevie

E) Instruct the user to proceed past the error message

Lynda 1 year ago

↳ replying to Stevie

B) Bypass SSL inspection for the affected site(s).

Leonie 1 year ago

↳ replying to Stevie

A) Import the root certificate for your internal certificate authority into Netskope.

Netskope NSK300 Exam - Topic 1 Question 32 Discussion