The Netskope Certified Cloud Security Integrator (NCCSI) (NSK200)

To create a DLP profile that will ensure that the data shown in the exhibit cannot be uploaded to a user’s personal Google Drive, you need to use optical character recognition (OCR). OCR is a feature that allows you to detect and extract text from images and scanned documents.  You can use OCR in your DLP profiles to identify sensitive data that is embedded or hidden in images 1 . In the exhibit, we can see that the data is a credit card number, which is a type of sensitive data that can be easily identified by OCR. You can create a DLP profile that uses OCR and matches the credit card number data identifier or a custom regex expression.  You can then apply an action such as block, alert, or quarantine to prevent the data from being uploaded to Google Drive 2 . Therefore, option C is correct and the other options are incorrect. References:  Optical Character Recognition (OCR) - Netskope Knowledge Portal ,  Add a Policy for Data Protection - Netskope Knowledge Portal

Creating a real-time threat protection policy specifically targeting the " Cloud Storage " category ensures that all supported cloud storage applications are covered by malware protection. This approach allows real-time scanning and response to malware threats within cloud storage environments​​.

Deploying the Netskope client on remote and traveling users ' devices provides the highest level of visibility into their activities regardless of their location. The Netskope client can steer traffic securely to the Netskope Security Cloud, offering consistent monitoring and protection​​.

The statement that describes how Netskope’s REST API, v1 and v2, handles authentication is A. Both REST API v1 and v2 require the use of tokens to make calls to the API. A token is a unique string that identifies the user or application that is making the API request.  The token must be included in the HTTP header of every API call as an authorization parameter 1 .  The token can be generated from the Netskope UI or from the Netskope Platform API 2 .  The token can also be revoked or refreshed as needed 3 . Therefore, option A is correct and the other options are incorrect. References:  REST API v1 Overview - Netskope Knowledge Portal ,  Netskope Platform API Endpoints for REST API v1 - Netskope Knowledge Portal ,  REST API v2 Overview - Netskope Knowledge Portal

The corporate firewall blocking UDP port 443 to Netskope could cause tunnel establishment failures. Netskope clients rely on this port for secure tunneling (via DTLS), so ensuring UDP port 443 is open is essential for connectivity. Additionally, legacy proxies intercepting traffic could also disrupt the SSL/TLS traffic necessary for the Netskope tunnel​​.

To filter for logs specifically generated by the Netskope client, select " Client " from the access_method filter dropdown menu in Skope IT. This filter allows administrators to narrow down logs by access method, making it easier to troubleshoot issues related only to the Netskope client​​.

To allow the security team to use the test data file that was detected as a virus by the Netskope Heuristics Engine, the following two steps are correct:

Click the “Add To File Filter” button to add the IOC to a file list. This will exclude the file from future malware scans and prevent false positive alerts.  The file list can be managed in the Settings > File Filter page 1 .

Click the “Lookup VirusTotal” button to verify if this IOC is a false positive. This will open a new tab with the VirusTotal report for the file hash. VirusTotal is a service that analyzes files and URLs for viruses, worms, trojans, and other kinds of malicious content.  The report will show how many antivirus engines detected the file as malicious and provide additional information about the file 2 .

https://docs.netskope.com/en/netskope-help/admin-console/incidents/

The DLP Incident workflow in Netskope is specifically designed for managing and investigating DLP incidents. This workflow allows incidents to be assigned to team members, facilitating efficient investigation and resolution of data loss concerns​​.

The Dictionary feature in Netskope DLP is designed to detect specific keywords or phrases, such as " Confidential " or " Access key. " By using a pre-defined list of sensitive terms, the Dictionary feature enables policy enforcement based on the presence of these keywords in data​​.