Exam NSK300 topic 1 question 10 discussion

Actual exam question from Netskope's NSK300

Question #: 10
Topic #: 1

A company has deployed Explicit Proxy over Tunnel (EPoT) for their VDI users. They have configured Forward Proxy authentication using Okta Universal Directory. They have also configured a number of Real-time Protection policies that block access to different Web categories for different AD groups so, for example, marketing users are blocked from accessing gambling sites. During User Acceptance Testing, they see inconsistent results where sometimes marketing users are able to access gambling sites and sometimes they are blocked as expected. They are seeing this inconsistency based on who logs into the VDI server first.
What is causing this behavior?

A. Forward Proxy is not configured to use the Cookie Surrogate.
B. Forward Proxy is not configured to use the IP Surrogate.
C. Forward Proxy authentication is configured but not enabled.
D. Forward Proxy is configured to use the Cookie Surrogate.

Show Suggested Answer

Suggested Answer: B 🗳️

by Metgatz at Oct. 5, 2024, 9:08 p.m.

Comments

Submit Cancel

Metgatz

1 month, 4 weeks ago

Selected Answer: A

Since IP Surrogate is enabled by default for SAML authentication and maps users to private IP addresses, if multiple users are behind the same IP (e.g., in a NAT environment), this can cause identification and policy enforcement problems. However, if Cookie Surrogate is not enabled, the identification of users may be incorrect, leading to inconsistencies. Therefore, the most appropriate response would be: A. Forward Proxy is not configured to use Cookie Surrogate.

upvoted 1 times

...