Exam NSK200 topic 1 question 5 discussion

Actual exam question from Netskope's NSK200

Question #: 5
Topic #: 1

Review the exhibit.
You are at the Malware Incident page. A virus was detected by the Netskope Heuristics Engine. Your security team has confirmed that the virus was a test data file. You want to allow the security team to use this file.
Referring to the exhibit, which two statements are correct? (Choose two.)

A. Click the "Add To File Filter" button to add the IOC to a file list.
B. Contact the CrowdStrike administrator to have the file marked as safe.
C. Click the "Lookup VirusTotal" button to verify if this IOC is a false positive.
D. Create a malware detection profile and update the file hash list with the IOC.

Show Suggested Answer

Suggested Answer: AC 🗳️

by nsciipotato at March 19, 2024, 5:38 a.m.

Comments

Submit Cancel

darkdante24

8 months, 3 weeks ago

Selected Answer: AC

Correct answer is A and C, as per the exhibit what will you by creating a malware detection profile? You will have to assign the profile to Realtime policy too.

upvoted 1 times

...