Netskope - Cloud Introdutory Technical Training

What are Risk Insights? - answer-Risk Insights understands the patterns of cloud applications usage and us that to determine a baseline risk assessment. How Risk Insights Works? - answer-Risk insights data comes from perimeter devices logs such as firewalls, proxy or SIEM and are analyzed by Netskope Cloud. The processed logs will show on different screens on Netskope showing the risk such applications pose to the network. What are the most common use cases for Netskope Risk Insights? - answer-- Cloud App Usage (Application) - What applications poses the most risk to the business? - Identify usage of ShadowIT applications - Inform Policy to let the users know the company policy What is Netskope Cloud Confidence Index (CCI)? - answer-CCI is a core component of Risk Insights, it is a database of over 40K SaaS and IaaS applications evaluated based on 30+ criteria from Cloud Security Alliance. Each application is evaluated individually and assesses the readiness on objective criteria and assings an overall score. How is the CCI Score Determined? - answer-Each application is assessed from enterprise readiness and matched against a set of eight functional areas What are the 8 functional areas of Netskope CCI? - answer-- Legal & Privacy - Access Control - Data Protection - Certification & Standards - Vulnerabilities & Exploits - Auditability - Disaster Recovery & Business Continuity - Financial Viability What are the Cloud Confidence Index Levels? - answer-Bigger is better 90 - 100 = Excelent 75 - 89 = High 60 - 74 = Medium 50 - 59 = Low 49 = Poor N/A = Application is Under Research Pending Change = Application is pending change How to Adjust the CCI score of an application? - answer-An enterprise may adjust an application score defining a custom weight to the questions. The questions range from -2 (not important) to +2 (very important), 0 being the default Netskope value. Based on custom weights an enterprise can adjust how Netskope assess that application for the business case. How applications are added to the CCI? - answer-1 - Apps are discovered or requested by customer 2 - Is it a SaaS app? (CCI only works with SaaS) 3 - If it is SaaS, Netskope gives it an unique name and ID 4 - Application is prioritizes for research 5 - Application research and evaluation 6 - App receives the CCI score What are the use cases for the Cloud Confidence Index? - answer-1 - Discover Cloud Usage 2 - Use CCI to choose one app over the other based on the score of an app. 3 - Block applications that does not meet the business requirements 4 - Inform policy to let users know which applications are allowed, devices that can connect What is the maximum number of application you can compare on CCI screen? - answer-3 During the assessment process by the CCI it is determined the application being assessed is not a SaaS application, what happens to the application? - answer-The application is added to the database for non-SaaS applications which of the coloured cloud indicates an application in the CCI that a score is yet to be rendered or the application is still being assessed by the CCI team? - answer-Gray Cloud What is CASB? - answer-Cloud Access Security Broker is an on-premisse or cloud based security policy enforcement that is placed between the cloud service consumers and the cloud providers to combine and interject enterprise security policies as cloud-based resources are accessed. What is the 4 pilars of CASB? - answer-1 - Visibility 2 - Compliance 3 - Data Security 4 - Threat Protection What is Netskope CASB API? - answer-Netskope CASB API provided visibility into data and activities for managed applications. Inventory, users, files and contents across access points. Policies for sensitive content What protocol does Netskope CASB API uses? - answer-OAuth 2.0 What is the traffic flow for Netskope CASB API? - answer-Netskope CASB API have separate data path to the cloud application, the application will provide update to Netskope tenant via out-of-band API calls or webhooks, or the netskpe tenant can have a polling to get updates. How CASB API detect changes using polling? - answer-Netskope tenant polls the cloud app for updates every 5 minutes. new files are detected 5 minutes after being uploads (max) DLP scan happens every 20 minutes on new content. How CASB API detect changes using Webhooks? - answer-Changes are pushed to Netskope tenant as they occur Near instant detection of newly uploaded content What are the basic steps for CASB API Protection Policies? - answer-Configure and Test Policies Continously Scan new content from when policy is created Retroactive (manually run) is used to scan pre existing data Leverage Data Loss Prevention and Threat Protection W