In this scenario, what are two possible reasons for this issue?

You have applied a DLP Profile to block all Personally Identifiable Information data uploads to Microsoft 365 OneDrive. DLP Alerts are not displayed and no OneDrive-related activities are displayed in the Skope IT App Events table.

In this scenario, what are two possible reasons for this issue? (Choose two.)
A . The Cloud Storage category is in the Steering Configuration as an exception.
B . The destination domain is excluded from decryption in the decryption policy.
C . A Netskope POP is not in your local country and therefore DLP policies cannot be applied.
D . DLP policies do not apply when using IPsec as a steering option.

View Answer

Answer: AB

Explanation:

If the Cloud Storage category is in the Steering Configuration as an exception, then Netskope will not steer any traffic to or from cloud storage applications, such as Microsoft 365 OneDrive, to its platform. This means that Netskope will not be able to inspect or apply any policies to this traffic, including DLP policies. Similarly, if the destination domain is excluded from decryption in the decryption policy, then Netskope will not decrypt any traffic to or from that domain, such as onedrive.com. This means that Netskope will not be able to inspect or apply any policies to this traffic, including DLP policies. The location of the Netskope POP or the use of IPsec as a steering option do not affect the application of DLP policies, as long as Netskope can steer and decrypt the relevant traffic.

Reference: Netskope Security Cloud Operation & Administration (NSCO&A) – Classroom Course, Module 3: Steering Configuration, Lesson 1: Steering Options and Lesson 2: Exceptions; Module 4: Decryption Policy, Lesson 1: Decryption Policy Overview and Lesson 2: Decryption Policy Configuration.

: https://www.bsimm.com/ : https://www.iso.org/isoiec-27001-information-security.html :

https://www.dasca.org/ : https://www.nist.gov/cyberframework