Netskope NSK101 Practice Exams
Last updated on Oct 22,2026- Exam Code: NSK101
- Exam Name: Netskope Certified Cloud Security Administrator (NCCSA)
- Certification Provider: Netskope
- Latest update: Oct 22,2026
Question #131
You are creating a real-time policy for cloud applications.
In addition to users, groups, and organizational units, which two source criteria would support this scenario? (Choose two.)
- A . protocol version
- B . access method
- C . browser version
- D . device classification
Correct Answer: BD
BD
Explanation:
When creating a real-time policy for cloud applications, you can use access method and device classification as source criteria, in addition to users, groups, and organizational units. Access method refers to how the user accesses the cloud application, such as browser, sync client, mobile app, etc. Device classification refers to the type of device used by the user, such as managed or unmanaged, Windows or Mac, etc. These criteria can help you define granular policies based on different scenarios and risks.
Reference: [Creating Real-Time Policies for Cloud Applications]
BD
Explanation:
When creating a real-time policy for cloud applications, you can use access method and device classification as source criteria, in addition to users, groups, and organizational units. Access method refers to how the user accesses the cloud application, such as browser, sync client, mobile app, etc. Device classification refers to the type of device used by the user, such as managed or unmanaged, Windows or Mac, etc. These criteria can help you define granular policies based on different scenarios and risks.
Reference: [Creating Real-Time Policies for Cloud Applications]
Question #132
You are required to create a policy that will notify and allow users to log into their personal Google Drive instance.
Which two policy components must be configured to enforce this use case? (Choose two.)
- A . Storage Constraint Profile
- B . Steering Exception
- C . User Alert
- D . User Constraint Profile
Correct Answer: B, C
B, C
Explanation:
To create a policy that will notify and allow users to log into their personal Google Drive instance, you need to configure the following components:
Steering Exception:
This component allows you to create exceptions for specific traffic. In this case, you will configure a steering exception to allow traffic to personal Google Drive instances. This ensures that the policy correctly routes the traffic to the appropriate destination without being blocked or filtered incorrectly.
User Alert:
A User Alert component will be configured to notify users when they attempt to log into their personal Google Drive. This alert can provide information about the policy and any actions the user may need to take. It helps in enforcing the policy by informing users about the specific conditions or restrictions.
Reference: Netskope Knowledge Portal: Configuring Steering Exceptions
Netskope Knowledge Portal: Creating User Alerts
B, C
Explanation:
To create a policy that will notify and allow users to log into their personal Google Drive instance, you need to configure the following components:
Steering Exception:
This component allows you to create exceptions for specific traffic. In this case, you will configure a steering exception to allow traffic to personal Google Drive instances. This ensures that the policy correctly routes the traffic to the appropriate destination without being blocked or filtered incorrectly.
User Alert:
A User Alert component will be configured to notify users when they attempt to log into their personal Google Drive. This alert can provide information about the policy and any actions the user may need to take. It helps in enforcing the policy by informing users about the specific conditions or restrictions.
Reference: Netskope Knowledge Portal: Configuring Steering Exceptions
Netskope Knowledge Portal: Creating User Alerts
Question #133
All users are going through Netskope’s Next Gen SWG. Your CISO requests a monthly report of all users who are accessing cloud applications with a "Low" or a "Poor" CCL, where the activity is either "Edit" or "Upload".
Using the Advanced Analytics interface, which two statements describe which actions must be performed in this scenario? (Choose two.)
- A . Create a report using the Data Collection "Page Events", filtering on the activities "Edit" and "Upload" for cloud apps with CCL values of "Low" or "Poor".
- B . Schedule a report with a monthly recurrence to be sent by e-mail with the attached PDF document at the end of each month.
- C . Create a report using the Data Collection "Application Events" filtering on the activities "Edit" and "Upload" for cloud apps with CCL values of "Low" or "Poor".
- D . Schedule a report with a monthly recurrence to be sent by SMS with the attached PDF document at the end of each month.
Correct Answer: A, B
A, B
Explanation:
Create the Report in Advanced Analytics:
Data Collection:
Use the "Page Events" data collection, which captures detailed user activities on web pages, including edits and uploads.
Filters:
Apply filters to include only the activities "Edit" and "Upload".
Add another filter for the Cloud Confidence Level (CCL) to include only those with "Low" or "Poor" ratings.
This ensures the report focuses on the specified user activities within cloud applications that have lower security ratings.
Steps:
Navigate to Advanced Analytics > Reports.
Create a new report and select "Page Events" as the data collection source.
Apply the necessary filters for activities and CCL values.
Schedule the Report:
Monthly Recurrence:
Set the report to run on a monthly schedule to ensure regular updates. Configure the report to be sent via email with a PDF attachment. Steps:
In the report scheduling options, set the recurrence to monthly.
Specify the email recipients, ensuring the CISO receives the report.
Select PDF as the report format.
Reference: For more details on creating and scheduling reports, refer to the Netskope documentation on Advanced Analytics and report generation.
A, B
Explanation:
Create the Report in Advanced Analytics:
Data Collection:
Use the "Page Events" data collection, which captures detailed user activities on web pages, including edits and uploads.
Filters:
Apply filters to include only the activities "Edit" and "Upload".
Add another filter for the Cloud Confidence Level (CCL) to include only those with "Low" or "Poor" ratings.
This ensures the report focuses on the specified user activities within cloud applications that have lower security ratings.
Steps:
Navigate to Advanced Analytics > Reports.
Create a new report and select "Page Events" as the data collection source.
Apply the necessary filters for activities and CCL values.
Schedule the Report:
Monthly Recurrence:
Set the report to run on a monthly schedule to ensure regular updates. Configure the report to be sent via email with a PDF attachment. Steps:
In the report scheduling options, set the recurrence to monthly.
Specify the email recipients, ensuring the CISO receives the report.
Select PDF as the report format.
Reference: For more details on creating and scheduling reports, refer to the Netskope documentation on Advanced Analytics and report generation.
Question #134
A customer is considering the cloud shared responsibility model.
In this scenario, which two criteria become the customer’s responsibility? (Choose two.)
- A . controlling access
- B . third-party certification
- C . enforcing service level agreements
- D . preventing data leakage
Correct Answer: A, D
A, D
Explanation:
In the context of the cloud shared responsibility model, the customer’s responsibilities include:
Controlling access:
Customers must manage access controls to ensure that only authorized users can access their data and applications. This includes implementing identity and access management (IAM) policies, multi-factor authentication (MFA), and regular auditing of access permissions. Preventing data leakage:
Customers are responsible for implementing data loss prevention (DLP) strategies to protect sensitive information from unauthorized access, disclosure, or exfiltration. This involves configuring and monitoring DLP policies, encryption, and other security measures.
These responsibilities are critical for maintaining the security and integrity of data in the cloud, complementing the cloud provider’s responsibilities for the infrastructure and services.
Reference: Netskope Knowledge Portal: Cloud Security
Shared Responsibility Model
A, D
Explanation:
In the context of the cloud shared responsibility model, the customer’s responsibilities include:
Controlling access:
Customers must manage access controls to ensure that only authorized users can access their data and applications. This includes implementing identity and access management (IAM) policies, multi-factor authentication (MFA), and regular auditing of access permissions. Preventing data leakage:
Customers are responsible for implementing data loss prevention (DLP) strategies to protect sensitive information from unauthorized access, disclosure, or exfiltration. This involves configuring and monitoring DLP policies, encryption, and other security measures.
These responsibilities are critical for maintaining the security and integrity of data in the cloud, complementing the cloud provider’s responsibilities for the infrastructure and services.
Reference: Netskope Knowledge Portal: Cloud Security
Shared Responsibility Model