Exam NSK300 topic 1 question 62 discussion

Actual exam question from Netskope's NSK300

Question #: 62
Topic #: 1

You have deployed Netskope to all users of the organization and you are now ready to begin ingesting all events, alerts, and Web transactions into your SIEM as a part of your requirements.

What are three ways in which you would accomplish this task? (Choose three.)

A. Use custom API calls to ingest to a data lake and then into your SIEM.
B. Use the Netskope Publisher to a stream syslog to your SIEM.
C. Use syslog directly to Splunk.
D. Use Cloud Log Shipper to an IaaS storage repository and then into your SIEM.

Show Suggested Answer

Suggested Answer: ABD 🗳️

by PICher at July 10, 2025, 1:01 p.m.

Comments

Submit Cancel

PICher

4 months, 2 weeks ago

Selected Answer: ACD

IMHO, should be C, instead of B I am not aware about any way a Netskope NPA Publisher can be used for log shipping

upvoted 2 times

DIG_Tofu

1 month, 3 weeks ago

NPA can be used as log shipper yes. ONce you've deployed the NPA in your env. you can select the option to ship logs from the NPA

upvoted 1 times

RobertoER

1 month, 2 weeks ago

So you're saying that ACD is the right thing to do?

upvoted 1 times

DIG_Tofu

1 month, 2 weeks ago

It seems, I haven’t see any options to send logs directly to the SIEM. And I bet that the questions guide us to the « 0 trust » mindset and then… select the less « straigt forward » answers…

upvoted 2 times

...