Netskope NSK300 Exam - Topic 1 Question 32 Discussion

Actual exam question for Netskope's NSK300 exam

Question #: 32
Topic #: 1

Review the exhibit.

You are the proxy administrator for a medical devices company. You recently changed a pilot group of users from cloud app steering to all Web traffic. Pilot group users have started to report that they receive the error shown in the exhibit when attempting to access the company intranet site that is publicly available. During troubleshooting, you realize that this site uses your company's internal certificate authority for SSL certificates.

Which three statements describe ways to solve this issue? (Choose three.)

AImport the root certificate for your internal certificate authority into Netskope.

BBypass SSL inspection for the affected site(s).

CCreate a Real-time Protection policy to allow access.

DChange the SSL Error Settings from Block to Bypass in the Netskope tenant.

EInstruct the user to proceed past the error message

Show Suggested Answer

Suggested Answer: A, B, D

A . Import the root certificate for your internal certificate authority into Netskope:

This step ensures that Netskope recognizes and trusts SSL certificates issued by your company's internal certificate authority. By importing the root certificate, you enable proper SSL inspection and validation for internal sites.

B . Bypass SSL inspection for the affected site(s):

Since the intranet site uses your company's internal certificate authority, bypassing SSL inspection for this specific site allows users to access it without encountering SSL errors.

D . Change the SSL Error Settings from Block to Bypass in the Netskope tenant:

Adjusting the SSL Error Settings to ''Bypass'' allows users to proceed past SSL errors, including self-signed certificate errors. This ensures uninterrupted access to the intranet site.Reference:

Netskope Security Cloud Introductory Online Technical Training

Netskope Security Cloud Operation & Administration (NSCO&A) - Classroom Training

Netskope Cloud Security Certification Program

by Arlene at Jun 15, 2025, 09:30 PM

Limited Time Offer

25%

Off

Get Premium NSK300 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Catina

2 months ago

Definitely need to create a Real-time Protection policy for this.

upvoted 0 times

...

Eveline

2 months ago

Wait, can users really just proceed past the error? Sounds risky!

upvoted 0 times

...

Brande

2 months ago

Import the root certificate into Netskope is a must!

upvoted 0 times

...

Vicki

3 months ago

I think changing SSL Error Settings is a solid option.

upvoted 0 times

...

Staci

3 months ago

Bypassing SSL inspection could work too.

upvoted 0 times

...

Yasuko

3 months ago

I feel like instructing users to proceed past the error in option E is not a good long-term solution, but it could work temporarily.

upvoted 0 times

...

Darell

3 months ago

I practiced a similar question where we had to adjust SSL settings. Changing the SSL Error Settings in option D could be a valid approach too.

upvoted 0 times

...

Theron

4 months ago

I'm not entirely sure, but bypassing SSL inspection sounds familiar. I think option B might be a quick fix for the users.

upvoted 0 times

...

Tawna

4 months ago

I remember we discussed the importance of importing root certificates in class. I think option A makes sense for this issue.

upvoted 0 times

...

Albert

4 months ago

Changing the SSL Error Settings from Block to Bypass in the Netskope tenant? I'm not sure about that one. Feels like it could open up some vulnerabilities. I'll need to double-check the implications.

upvoted 0 times

...

Reena

4 months ago

I like the idea of creating a Real-time Protection policy to allow access. That seems like a more secure solution than just telling users to ignore the error message.

upvoted 0 times

...

Alishia

4 months ago

Hmm, I'm a bit confused. Do we really need to bypass SSL inspection for the affected site? That seems like it could create a security risk. I'll have to think this through.

upvoted 0 times

...

Yolando

5 months ago

Okay, I think I've got this. The key is to import the root certificate for the internal CA into Netskope to avoid the SSL error. That should do the trick.

upvoted 0 times

...