Discuss Netskope NSK300 Exam Topic 5 Question 27

Review the exhibit.

You are asked to integrate Netskope with Crowdstrike EDR. You added the Remediation profile shown in the exhibit.

Which action will this remediation profile take?

AThe endpoint will be isolated.

BThe malware hash will be added as an IOC in Crowdstrike.

CThe malware will be quarantined.

DThe malware hash will be added as an IOC in Netskope.

Suggested Answer: B

To solve the problem of normal websites not rendering properly due to a Real-time Protection policy that blocks all activities to non-corporate S3 buckets, the best solution is tocreate a Real-time Protection policy to allow the Browse activity to the Cloud Storage category. This approach will enable users to view content from various cloud storage services, including Amazon S3, without allowing full access to non-corporate S3 buckets.It's a more granular and less restrictive policy that allows necessary browsing activities while still maintaining control over the upload and download activities to non-corporate buckets1.

Get Premium NSK300 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

32 comments · newest first

Alisha 10 months ago

Adding the hash as an IOC in Crowdstrike sounds right too.

Shawna 11 months ago

I think the malware will be quarantined instead.

Lynelle 11 months ago

Wait, are we sure about that?

Lilli 11 months ago

Totally agree with that!

Eileen 11 months ago

The endpoint will be isolated.

Beckie 12 months ago

I feel like the answer has to do with adding the malware hash as an IOC, but I can't remember if it's specifically for Crowdstrike or Netskope.

Johnathon 12 months ago

I'm a bit confused about the options. Is the endpoint isolation really the same as quarantining the malware? They seem related but different.

Deonna 12 months ago

I remember a similar question where we had to choose between adding an IOC in Crowdstrike or Netskope. I feel like this one is leaning towards Crowdstrike too.

Vinnie 1 year ago

I think the remediation profile might isolate the endpoint, but I'm not entirely sure. It could also be about quarantining the malware.

Isabelle 1 year ago

Ah, I see the key information in the exhibit. I'm confident I can choose the right answer for this question.

Marica 1 year ago

This seems straightforward, but I want to make sure I'm not missing any important details before selecting my answer.

Hillary 1 year ago

I think I know the answer, but I want to double-check the information in the exhibit to be sure.

Devorah 1 year ago

Okay, the question is asking about the action this remediation profile will take. Let me think through the options...

Merlyn 1 year ago

Hmm, this looks like a tricky one. I'll need to carefully review the remediation profile details to determine the correct action.

An 1 year ago

Alright, time to put my incident response skills to the test. I'm pretty confident that B is the correct answer here.

Lavera 1 year ago

↳ replying to An

User1: Let's go with option B then.

Gerardo 1 year ago

↳ replying to An

User2: Agreed, adding the malware hash as an IOC in Crowdstrike makes sense.

Chan 1 year ago

↳ replying to An

User1: I think B is the correct answer too.

Anjelica 1 year ago

Ha! If the malware hash was added as an IOC in Netskope, that would be like trying to catch a fish with a net made of holes. Gotta go with B on this one.

Nicholle 1 year ago

↳ replying to Anjelica

Definitely, quarantining the malware seems like the best option here.

Hollis 1 year ago

↳ replying to Anjelica

Yeah, isolating the endpoint wouldn't really solve the problem.

Noemi 1 year ago

↳ replying to Anjelica

I agree, adding the malware hash as an IOC in Crowdstrike makes more sense.

Clement 1 year ago

↳ replying to Anjelica

Definitely, quarantining the malware could also be a good option to prevent further damage.

Anisha 1 year ago

↳ replying to Anjelica

Yeah, isolating the endpoint might not be as effective as adding the hash as an IOC in Crowdstrike.

Antonio 1 year ago

↳ replying to Anjelica

I agree, adding the malware hash as an IOC in Crowdstrike seems like the best option.

Leslee 1 year ago

Hmm, I'm not too sure about this one. Isolating the endpoint or quarantining the malware would also make sense. I'll have to think this through carefully.

Salome 2 years ago

Okay, this seems pretty straightforward. The remediation profile is adding the malware hash as an IOC in Crowdstrike, so the answer must be B.

Natalie 1 year ago

↳ replying to Salome

Yes, that's correct. It's a simple integration with Crowdstrike EDR.

Mayra 1 year ago

↳ replying to Salome

I agree, the answer is B. It will add the malware hash as an IOC in Crowdstrike.

Natalie 2 years ago

Adding the malware hash as an IOC in Crowdstrike could also be a possibility.

Edwin 2 years ago

I believe the malware will be quarantined.

Natalie 2 years ago

I think the action will be to isolate the endpoint.

Netskope NSK300 Exam - Topic 5 Question 27 Discussion