NSK300 Exam Dumps : Netskope Certified Cloud Security Architect Exam

To ensure that the web application using HTTPS on port 6443 is both reachable and decrypted by Netskope, the correct action is to enable “Steer non-standard ports” in the steering configuration and add the domain and port as a new non-standard port. This is because Netskope’s default configuration steers standard HTTP/HTTPS traffic, typically on ports 80 and 443. Since port 6443 is a non-standard port for HTTPS traffic, it requires explicit configuration to be steered through Netskope1.

In the exhibit, the Malware Remediation Profile is configured with:

Connected EDR Server: crowdstrike-demo

Selected Action: Add to watchlist/blocklist

Not Selected: Isolate, Alert

When using CrowdStrike as an EDR integration, the action “Add to watchlist/blocklist” corresponds to:

➡️ Adding the malware hash as an Indicator of Compromise (IOC) inside CrowdStrike Falcon.

CrowdStrike will then block or flag that hash across all managed endpoints, depending on its local policies.

To accomplish the task of not steering specific domains to the Netskope Cloud while using the Explicit Proxy over Tunnel (EPoT) steering method, you would define exception domains in the PAC file (A). This is because the PAC file is used to specify which domains should bypass the proxy and connect directly, thus allowing for granular control over the traffic that is steered to Netskope1.