NSK300 Dumps - Netskope Certified Cloud Security Architect Exam Practice Exam Questions

To validate that the GRE tunnel is configured correctly and that traffic is flowing to Netskope, the correct statements are:

• A: You can use your local router or network device to verify that keepalives are being received and traffic is flowing to Netskope. This is a standard method for checking the health and activity of a GRE tunnel.
• C: You can verify that the tunnel is up and receiving traffic in the Netskope UI under Settings > Security Cloud Platform > GR

  E.  

   This is a feature provided by Netskope to monitor the status of GRE tunnels directly from the Netskope interface12.

Statement B is incorrect because Netskope provides its own tools for monitoring the status of the tunnel. Statement D is incorrect because the Netskope Trust portal provides information on the overall service status and updates, not specific tunnel status3.

References: The references for these answers can be found in the Netskope Knowledge Portal, which provides detailed guidance on configuring and validating GRE tunnels12. Additionally, the Netskope Community Forum offers insights and solutions for deploying and monitoring GRE tunnels

To address the issue of a certificate-pinned application not being accessible due to certificate pinning, while still steering the traffic to Netskope, the two methods that would satisfy the requirements are:

• B: Configure the SSL Do Not Decrypt policy to not decrypt traffic for domains used by the native application. This ensures that the SSL traffic for the specified domains is not decrypted, thus avoiding issues with certificate pinning.
• C: Configure domain exceptions in the steering configuration for the domains used by the native application.By setting domain exceptions, traffic to these domains will bypass SSL decryption, allowing the certificate-pinned application to function as expected1.

These methods are in line with Netskope’s capabilities for handling certificate-pinned applications, which often require bypassing decryption to prevent breaking the application’s functionality due to its security features1.

References: The Netskope Knowledge Portal provides detailed information on managing certificate-pinned applications, including how to configure SSL Do Not Decrypt policies and domain exceptions in the steering configuration1.Additionally, the Netskope Community Forum offers insights and best practices for handling certificate-pinned applications2.