In this scenario, how would you accomplish this task?

The risk team at your company has determined that traffic from the sales team to a custom Web application should not be inspected by Netskope. All other traffic to the Web application should continue to be inspected.

In this scenario, how would you accomplish this task?
A . Create a Do Not Decrypt Policy using User Group and Domain in the policy page.
B . Create a Do Not Decrypt Policy using Application in the policy page and a Steering Exception for Group
C . Create a Do Not Decrypt Policy using Destination IP and Application in the policy page.
D . Create a Do Not Decrypt Policy using Source IP and Application in the policy page.

View Answer

Answer: A

Explanation:

To prevent traffic from the sales team to a custom Web application from being inspected by Netskope, you need to create a Do Not Decrypt Policy using User Group and Domain in the policy page. A Do Not Decrypt Policy allows you to specify the traffic you want to leave encrypted and not further analyzed by Netskope via the Real-time Protection policies3. You can use the User Group criteria to match the sales team members and the Domain criteria to match the custom Web application. This way, only the traffic from the sales team to the custom Web application will be exempted from decryption, while all other traffic to the Web application will continue to be inspected.