NSK200

Netskope Certified Cloud Security Integrator (NCCSI)

Part of Netskope Certified Cloud Security Integrator (NCCSI)

Targets: Product version not specified in the blueprint
Blueprint source: Official NCCSI (NSK200) Certification Description; 90 minutes, Pearson VUE; practitioner profile: implement, integrate, configure, monitor, and troubleshoot, ~12 months suggested; recommended preparation: NSCIOTT, NSCO&A, and NSCI&I Academy courses plus a tenant and the Knowledge Portal ↗

Independent study aid built from the public exam blueprint. Not affiliated with, authorized by, or endorsed by netskope. Exam objectives, versions, and availability change, so always verify against the official blueprint.

Cloud Security Solutions

NCCSI-A.01 Cloud security theory
NCCSI-A.02 Traffic steering methods
On this site: Netskope Steering Methods: Getting Traffic to the Cloud That Inspects It, How a PAC File Chooses a Proxy, GRE Tunnels: The Simplest Envelope in Networking, IPsec and IKE: How Encrypted Tunnels Negotiate Themselves
Tools: netskope-steering-decision-explainer, pac-file-explainer
NCCSI-A.03 Major solutions that are available in the Netskope Security Cloud platform
On this site: Netskope Platform Architecture: One Platform, Two Data Paths, One Private Cloud, Netskope Cloud Firewall: Egress Control for Everything That Isn't Web, Netskope: Cloud Forward Proxy and Inline TLS Decryption, Data Loss Prevention: How Machines Recognize Secrets

Netskope Platform Implementation

NCCSI-B.01 Various steering methods to a Netskope tenant
On this site: Netskope Steering Methods: Getting Traffic to the Cloud That Inspects It, How a PAC File Chooses a Proxy, GRE Tunnels: The Simplest Envelope in Networking, IPsec and IKE: How Encrypted Tunnels Negotiate Themselves
Tools: netskope-steering-decision-explainer, pac-file-explainer
NCCSI-B.02 Access management solutions
On this site: SAML 2.0: How Browser SSO Works, SCIM: The Standard That Provisions the Accounts SSO Signs In
Tools: saml-decoder
NCCSI-B.03 Privileged account control
NCCSI-B.04 Netskope client deployment
On this site: Netskope Client Deployment: Enrollment, Identity, and the Tunnel
NCCSI-B.05 Data protection with Netskope DLP
On this site: Data Loss Prevention: How Machines Recognize Secrets
NCCSI-B.06 Threat protection using the Netskope platform
On this site: Sandbox Detonation: Judging a File by What It Does

Netskope Platform Management

NCCSI-C.01 DLP policy creation
On this site: Data Loss Prevention: How Machines Recognize Secrets
NCCSI-C.02 Private application publication
On this site: Netskope Private Access: ZTNA Instead of the VPN
NCCSI-C.03 Real-time protection policies
On this site: Real-time vs API Protection: The Two Vantage Points of a Security Cloud
NCCSI-C.04 SSL decryption policies
On this site: Netskope: Cloud Forward Proxy and Inline TLS Decryption, SSL Forward Proxy: How Outbound TLS Interception Works and What Breaks It
NCCSI-C.05 REST API integrations
On this site: HTTP Methods: The Verbs of the Web, HTTP Status Codes: The Five Families
Tools: http-request-translator, http-status-code-explainer

Netskope Platform Monitoring

NCCSI-D.01 Event analysis
On this site: Netskope Events and Advanced Analytics: From Traffic to Evidence
NCCSI-D.02 Incident response workflows
Tools: incident-timeline-rca-builder
NCCSI-D.03 Application discovery
On this site: The Cloud Confidence Index: Scoring the Apps Your Users Already Found, Netskope Events and Advanced Analytics: From Traffic to Evidence
NCCSI-D.04 Event sharing methodologies
On this site: Netskope Events and Advanced Analytics: From Traffic to Evidence, Syslog Message Formats: RFC 3164 vs RFC 5424

Netskope Platform Troubleshooting

NCCSI-E.01 Client connectivity issues
On this site: Netskope Client Deployment: Enrollment, Identity, and the Tunnel
NCCSI-E.02 Use of logs for troubleshooting
On this site: Syslog Message Formats: RFC 3164 vs RFC 5424
NCCSI-E.03 Troubleshooting user provisioning
On this site: SCIM: The Standard That Provisions the Accounts SSO Signs In, SAML 2.0: How Browser SSO Works
Tools: saml-decoder