Exam NSK300 topic 1 question 32 discussion

Actual exam question from Netskope's NSK300

Question #: 32
Topic #: 1

You are troubleshooting an issue with users who are unable to reach a financial SaaS application when their traffic passes through Netskope. You determine that this is because of IP restrictions in place with the SaaS vendor. You are unable to add Netskope's IP ranges at this time, but need to allow the traffic.
How would you allow this traffic?

A. Use NPA to implement Source IP anchoring so the traffic will egress from the corporate data center.
B. Use Explicit Proxy Over Tunnel (EPoT) so the traffic will egress from the corporate data center.
C. Use Cloud Explicit Proxy so the traffic will egress from the corporate data center.
D. Use an IPsec tunnel to forward traffic so it will egress from the corporate data center.

Show Suggested Answer

Suggested Answer: A 🗳️

by lolojepu at April 6, 2025, 1:02 a.m.

Comments

Submit Cancel

knight011

2 months, 3 weeks ago

Selected Answer: B

EPoT lets Netskope forward (after inspection) the matching SaaS traffic to your on-prem/Datacenter explicit proxy over a GRE/IPsec tunnel. That proxy then egresses the traffic using your corporate public IPs, satisfying the SaaS vendor’s IP allowlist—without adding Netskope cloud egress IPs.

upvoted 1 times

...