Netskope Exam NSK100 Topic 10 Question 8 Discussion

Limited Time Offer

25%

Off

Get Premium NSK100 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Myra

8 months ago

Good point. Those two options clearly violate the organization's policies and procedures, whereas A and B involve the use of sanctioned tools and services, even if they're being used in a way that's not entirely appropriate.

upvoted 0 times

Shala

8 months ago

A) a sanctioned Salesforce account used by a contractor to upload non-sensitive data

upvoted 0 times

...

Grover

8 months ago

B) a sanctioned Wetransfer being used by a corporate user to share sensitive data

upvoted 0 times

...

Hayley

8 months ago

D) an unsanctioned Google Drive account used by a corporate user to upload non-sensitive data

upvoted 0 times

...

Alaine

8 months ago

C) an unsanctioned Microsoft 365 OneDrive account being used by a corporate user to upload sensitive data

upvoted 0 times

...

Claudia

8 months ago

Exactly, so in this case, I would say that C and D are the two examples of Shadow IT. The use of an unsanctioned Microsoft 365 OneDrive account and an unsanctioned Google Drive account by corporate users to upload data, even if it's non-sensitive, would be considered Shadow IT.

upvoted 0 times

...

Truman

8 months ago

Hmm, from my understanding, Shadow IT refers to the use of unsanctioned IT systems and software by employees, usually without the knowledge or approval of the IT department.

upvoted 0 times

...

Elza

8 months ago

Alright, let's take a look at this question. I think the key here is to identify the cases that are considered 'Shadow IT' within the organization.

upvoted 0 times

...