Netskope Exam NSK300 Topic 6 Question 26 Discussion

Actual exam question for Netskope's NSK300 exam

Question #: 26
Topic #: 6

You built a number of DLP profiles for different sensitive data types. If a file contains any of this sensitive data, you want to take the most restrictive policy action but also create incident details for all matching profiles.

Which statement is correct in this scenario?

ACreate a Real-time Protection policy for each DLP profile; each matched profile will generate a unique DLP incident.

BCreate a Real-time Protection policy for each DLP profile; all matched profiles will show up in a single DLP incident

CCreate a single Real-time Protection policy and include all of the DLP profiles; each matched profile will generate a unique DLP incident

DCreate a single Real-time Protection policy and include all of the DLP profiles; all matched profiles will show up in a single DLP incident.

Show Suggested Answer

Suggested Answer: A

The appropriate rule type to use in the DLP profile for a document that is considered confidential when filled out is fingerprint classification. Fingerprinting is a method used to identify and protect sensitive data within documents. It works by creating a digital fingerprint of a file, which can then be used to detect any copies or derivatives of that file. In this case, fingerprinting would allow the hospital to differentiate between the blank patient form, which can be freely shared, and the same form with patient information filled out, which is confidential1.

by Mee at Jan 25, 2025, 09:35 AM

Limited Time Offer

25%

Off

Get Premium NSK300 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Rodrigo

20 days ago

Wait, so we're supposed to choose the most restrictive policy that also creates the most incidents? Sounds like a real party trick! I'm going with the option that lets me juggle the most balls at once.

upvoted 0 times

...

Delisa

23 days ago

Option B is the way to go. I don't want to deal with a bunch of separate incidents, that's just going to be a headache. A single incident with all the matches is the way to go.

upvoted 0 times

...

Natalya

26 days ago

Option D is the answer for me. Why create multiple policies when you can have everything in one place? Plus, a single incident is easier to manage and report on.

upvoted 0 times

Shawnda

8 days ago

Option D is definitely the way to go. It keeps everything organized and makes reporting simpler.

upvoted 0 times

...

2 months ago

I think the correct statement is C.

upvoted 0 times

...