Netskope Certified Cloud Security Administrator

Here you have the best Netskope NSK100 practice exam questions

You have 60 total questions to study from
Each page has 5 questions, making a total of 12 pages
You can navigate through the pages using the buttons at the bottom
This questions were last updated on December 31, 2025
This site is not affiliated with or endorsed by Netskope.

Question 1 of 60

A customer wants to detect misconfigurations in their AWS cloud instances.
In this scenario, which Netskope feature would you recommend to the customer?

Netskope Secure Web Gateway (SWG)

Netskope Cloud Security Posture Management (CSPM)

Netskope Advanced DLP and Threat Protection

Netskope SaaS Security Posture Management (SSPM)

Correct Answer: B

Question 2 of 60

You just deployed the Netskope client in Web mode and several users mention that their messenger application is no longer working. Although you have a specific real-time policy that allows this application, upon further investigation you discover that it is using proprietary encryption. You need to permit access to all the users and maintain some visibility.
In this scenario, which configuration change would accomplish this task?

Change the real-time policy to block the messenger application.

Create a new custom cloud application using the custom connector that can be used in the real-time policy.

Add a policy in the SSL decryption section to bypass the messenger domain(s).

Edit the steering configuration and add a steering exception for the messenger application.

Correct Answer: C

Question 3 of 60

What are two fundamental differences between the inline and API implementation of the Netskope platform? (Choose two.)

The API implementation can be used with both sanctioned and unsanctioned applications.

The API implementation can only be used with sanctioned applications.

The inline implementation can effectively block a transaction in both sanctioned and unsanctioned applications.

The inline implementation can only effectively block a transaction in sanctioned applications.

Correct Answer: B, C

Question 4 of 60

A customer asks you to create several real-time policies. Policy A generates alerts when any user downloads, uploads, or shares files on a cloud storage application. Policy B blocks users from downloading files from any operating system (OS) other than Mac or Windows for cloud storage. In this case, policy A is least restrictive and policy B is more restrictive.
Which statement is correct in this scenario?

Policy A is implemented before policy B.

Policy B is implemented before policy A.

The policy order is not important; policies are independent of each other.

These two policies would actually not work together.

Correct Answer: B

Question 5 of 60

What are two CASB inline interception use cases? (Choose two.)

blocking file uploads to a personal Box account

running a retroactive scan for data at rest in Google Drive

using the Netskope steering client to provide user alerts when sensitive information is posted in Slack

scanning Dropbox for credit card information

Correct Answer: A, C