Netskope NSK300 Exam - Topic 1 Question 7 Discussion

Actual exam question for Netskope's NSK300 exam

Question #: 7
Topic #: 1

A hospital has a patient form that they share with their patients over Gmail. The blank form can be freely shared among anyone. However, if the form has any information filled out. the document is considered confidential.

Which rule type should be used in the DLP profile to match such a document?

AUse fingerprint classification.

BUse a dictionary rule for all your patient names.

CUse Exact Match with patient names

DUse predefined DLP Rule(s) that match the patient name.

Show Suggested Answer

Suggested Answer: A

The appropriate rule type to use in the DLP profile for a document that is considered confidential when filled out is fingerprint classification. Fingerprinting is a method used to identify and protect sensitive data within documents. It works by creating a digital fingerprint of a file, which can then be used to detect any copies or derivatives of that file. In this case, fingerprinting would allow the hospital to differentiate between the blank patient form, which can be freely shared, and the same form with patient information filled out, which is confidential1.

by Carey at May 10, 2024, 10:00 PM

Limited Time Offer

25%

Off

Get Premium NSK300 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Whitney

3 months ago

Not sure if any of these options really cover confidentiality.

upvoted 0 times

...

Yuonne

3 months ago

Wait, can you really share a blank form like that?

upvoted 0 times

...

Yvette

3 months ago

A fingerprint classification seems too vague for this.

upvoted 0 times

...

Dominga

4 months ago

I think C is better for exact matches.

upvoted 0 times

...

Jolene

4 months ago

Definitely D for predefined DLP rules!

upvoted 0 times

...

Nikita

4 months ago

I recall practicing with dictionary rules before, but I wonder if they would be effective for matching filled-out forms specifically.

upvoted 0 times

...

Geraldine

4 months ago

I feel like using Exact Match with patient names could be a good option, but I’m not confident if that’s the best choice.

upvoted 0 times

...

Laurena

4 months ago

I’m not entirely sure, but I remember something about using fingerprint classification for documents. Would that apply here?

upvoted 0 times

...

Joni

5 months ago

I think we might need to use a predefined DLP rule since it sounds like the patient names are sensitive information.

upvoted 0 times

...

Louvenia

5 months ago

Option A seems like the way to go here. Fingerprinting the document should be able to detect if any information has been filled out, which is the key requirement. The other options don't seem to fully address the problem.

upvoted 0 times

...

Josefa

5 months ago

I'd go with option D - using predefined DLP rules that can detect the presence of patient names. That way we cover the confidentiality aspect without having to worry about the document being shared when blank.

upvoted 0 times

...

Karima

5 months ago

I'm a bit confused on this one. Is fingerprinting the right approach since the document can be shared when blank? Maybe an exact match rule would be better?

upvoted 0 times

...

Valentin

5 months ago

Hmm, this is a tricky one. I think the key here is that the document is considered confidential only if it has any information filled out. So we need a rule that can detect the presence of data, not just specific content.

upvoted 0 times

...

Albina

5 months ago

Alright, I've got it. The Strict profile is the most comprehensive, and then adding the DNS Sinkholing and Passive DNS Monitoring features on top of that will give me the best possible protection against command and control traffic. Time to select option A!

upvoted 0 times

...

Merilyn

5 months ago

Wait, is 'perpetual' the same as 'running'? I'm not 100% certain, but it seems to match the description.

upvoted 0 times

...

Golda

5 months ago

Okay, let me see here. RESTCONF is a RESTful API for network configuration, and it uses HTTPS, so TLS is definitely involved. I'm pretty confident the answer is A, but I'll double-check my notes just to be sure.

upvoted 0 times

...

Wai

5 months ago

I'm feeling pretty confident about this. I remember learning about this specific scenario in my BIG-IP training.

upvoted 0 times

...

Vi

5 months ago

Hmm, I'm not too familiar with AVR, so I'll need to think this through carefully. The options seem to cover different steps, so I'll need to consider the proper sequence to utilize AVR.

upvoted 0 times

...