NSK300 Practice Test

NSK300 Practice Test practice questions, page 4 of 4, with answer review and explanations.

Question 16

Your client is an NG-SWG customer. They are going to use the Explicit Proxy over Tunnel (EPoT) steering method. They have a specific list of domains that they do not want to steer to the Netskope Cloud. What would accomplish this task?

  1. Define exception domains in the PAC file.
  2. Define exceptions in the Netskope steering configuration.
  3. Create a real-time policy with a bypass action.
  4. Use an SSL decryption policy.

Question 17

You are building an architecture plan to roll out Netskope for on-premises devices. You determine that tunnels are the best way to achieve this task due to a lack of support for explicit proxy in some instances and IPsec is the right type of tunnel to achieve the desired security and steering. What are three valid elements that you must consider when using IPsec tunnels in this scenario? (Choose three.)

  1. cipher support on tunnel-initiating devices
  2. bandwidth considerations
  3. the categories to be blocked
  4. the impact of threat scanning performance
  5. Netskope Client behavior when on-premises