Exam NSK300 topic 1 question 22 discussion

Actual exam question from Netskope's NSK300

Question #: 22
Topic #: 1

You built a number of DLP profiles for different sensitive data types. If a file contains any of this sensitive data, you want to take the most restrictive policy action but also create incident details for all matching profiles.
Which statement is correct in this scenario?

A. Create a Real-time Protection policy for each DLP profile: each matched profile will generate a unique DLP incident.
B. Create a Real-time Protection policy for each DLP profile: all matched profiles will show up in a single DLP incident.
C. Create a single Real-time Protection policy and include all of the DLP profiles; each matched profile will generate a unique DLP incident.
D. Create a single Real-time Protection policy and include all of the DLP profiles; all matched profiles will show up in a single DLP incident.

Show Suggested Answer

Suggested Answer: D 🗳️

by Metgatz at Oct. 5, 2024, 11:41 p.m.

Comments

Submit Cancel

Metgatz

1 month, 4 weeks ago

Selected Answer: D

Sorry recheck - is D : Doc Netskope: If the content matches all three profiles, then DLP blocks the content. DLP also generates an alert and a single incident associated with the PCI, PII, and PHI violations.

upvoted 1 times

...

Metgatz

1 month, 4 weeks ago

Selected Answer: C

I think C - One policy multiples profile ech matched profile will generate a unique DLP incident.

upvoted 1 times

...