ExamTopics Logo
Mail Us[email protected]
Menu
Netskope Discussions
exam questions

Exam NSK200 All Questions

View all questions & answers for the NSK200 exam
Go to Exam

Exam NSK200 topic 1 question 5 discussion

Actual exam question from Netskope's NSK200
Question #: 5
Topic #: 1
[All NSK200 Questions]


Review the exhibit.
You are at the Malware Incident page. A virus was detected by the Netskope Heuristics Engine. Your security team has confirmed that the virus was a test data file. You want to allow the security team to use this file.
Referring to the exhibit, which two statements are correct? (Choose two.)

  • A. Click the "Add To File Filter" button to add the IOC to a file list.
  • B. Contact the CrowdStrike administrator to have the file marked as safe.
  • C. Click the "Lookup VirusTotal" button to verify if this IOC is a false positive.
  • D. Create a malware detection profile and update the file hash list with the IOC.
Show Suggested Answer Hide Answer
Suggested Answer: AC 🗳️
by nsciipotato at March 19, 2024, 5:38 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
darkdante24
7 months ago
Selected Answer: AC
Correct answer is A and C, as per the exhibit what will you by creating a malware detection profile? You will have to assign the profile to Realtime policy too.
upvoted 1 times
...
Arsiezis
7 months, 2 weeks ago
Selected Answer: CD
There isn't the "Add To File Filter" button. So, C & D.
upvoted 1 times
...
Arsiezis
7 months, 2 weeks ago
There isn't the "Add To File Filter" button. So, C & D.
upvoted 1 times
...
nsciipotato
1 year, 1 month ago
A & D No need to lookup virustotal
upvoted 4 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago