Netskope Certified Cloud Security Expert (NCCSE) — Question 9

You deployed IPsec tunnels to steer on-premises traffic to Netskope. You are now experiencing problems with an application that had previously been working. In an attempt to solve the issue, you create a Steering Exception in the Netskope tenant for that application: however, the problems are still occurring.
Which statement is correct in this scenario?

Answer options

• A. You must create a private application to steer Web application traffic to Netskope over an IPsec tunnel.
• B. Exceptions only work with IP address destinations.
• C. Steering bypasses for IPsec tunnels must be applied at your edge network device.
• D. You must deploy a PAC file to ensure the traffic is bypassed pre-tunnel.

Correct answer: C

Explanation

Option C is correct because steering bypasses for IPsec tunnels are indeed configured at the edge network device, ensuring that the traffic is managed properly before it reaches Netskope. Options A and D are incorrect as they refer to unnecessary steps or misconfigurations that do not address the issue at hand, while B is incorrect because exceptions can apply to more than just IP address destinations.