NSK300

Netskope Certified Cloud Security Architect

Part of Netskope Certified Cloud Security Architect

Targets: Product version not specified in the blueprint
Blueprint source: Official Cloud Security Certification Program description (Architect / NSK300 section); 90 minutes, Pearson VUE; practitioner profile: plan and execute a successful deployment and set the environment up for ongoing value realization, ~18 months suggested; recommended preparation adds the Activation & Adoption course and lab to NSCIOTT, NSCO&A, and NSCI&I ↗

Independent study aid built from the public exam blueprint. Not affiliated with, authorized by, or endorsed by netskope. Exam objectives, versions, and availability change, so always verify against the official blueprint.

Cloud Security Solutions

NSKA-A.01 Components and functions of the Netskope Security Cloud Platform
On this site: Netskope Platform Architecture: One Platform, Two Data Paths, One Private Cloud, Netskope Private Access: ZTNA Instead of the VPN, Netskope Cloud Firewall: Egress Control for Everything That Isn't Web, Netskope: Cloud Forward Proxy and Inline TLS Decryption
NSKA-A.02 Integration capabilities with the Netskope Security Cloud Platform
On this site: Real-time vs API Protection: The Two Vantage Points of a Security Cloud
NSKA-A.03 Deployment methods are supported with Netskope
On this site: Netskope Steering Methods: Getting Traffic to the Cloud That Inspects It, HTTP Proxies: Forward vs Reverse, Explicit vs Transparent
NSKA-A.04 Various microservices of the Netskope Security Cloud Platform
On this site: Netskope Platform Architecture: One Platform, Two Data Paths, One Private Cloud

Netskope Platform Implementation

NSKA-B.01 Steering methods - Architecture
On this site: Netskope Steering Methods: Getting Traffic to the Cloud That Inspects It, How a PAC File Chooses a Proxy, GRE Tunnels: The Simplest Envelope in Networking, IPsec and IKE: How Encrypted Tunnels Negotiate Themselves, Tunnel Overhead, MTU, and MSS: The Byte Math Every Tunnel Owes
NSKA-B.02 Steering methods - Deployment
On this site: Netskope Steering Methods: Getting Traffic to the Cloud That Inspects It, Netskope Client Deployment: Enrollment, Identity, and the Tunnel, How a PAC File Chooses a Proxy
Tools: netskope-steering-decision-explainer, pac-file-explainer
NSKA-B.03 API-enabled protection
On this site: Real-time vs API Protection: The Two Vantage Points of a Security Cloud
NSKA-B.04 Real-time Protection
On this site: Real-time vs API Protection: The Two Vantage Points of a Security Cloud

Netskope Platform Management

NSKA-C.01 Administrative tasks in the Netskope Security Cloud Platform
NSKA-C.02 DLP management
On this site: Data Loss Prevention: How Machines Recognize Secrets
NSKA-C.03 Identity management
On this site: SAML 2.0: How Browser SSO Works, SCIM: The Standard That Provisions the Accounts SSO Signs In
Tools: saml-decoder
NSKA-C.04 Netskope components monitoring
On this site: Netskope Events and Advanced Analytics: From Traffic to Evidence

Netskope Platform Monitoring

NSKA-D.01 Reporting and analytics
On this site: Netskope Events and Advanced Analytics: From Traffic to Evidence

Netskope Platform Troubleshooting

NSKA-E.01 Client connectivity issues
On this site: Netskope Client Deployment: Enrollment, Identity, and the Tunnel
NSKA-E.02 Steering analysis
On this site: Netskope Steering Methods: Getting Traffic to the Cloud That Inspects It, How a PAC File Chooses a Proxy
Tools: netskope-steering-decision-explainer, pac-file-explainer
NSKA-E.03 Connectivity issues
On this site: Map the Path Before You Troubleshoot
NSKA-E.04 SAML integrations
On this site: SAML 2.0: How Browser SSO Works, SAML Bindings and SP vs IdP Initiation, SAML Signatures and XML-DSig
Tools: saml-decoder