Cyber Monday 2024! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location PL
Mob_nav_barsMENU

Netskope Exam NSK100 Topic 5 Question 12 Discussion

Actual exam question for Netskope's NSK100 exam
Question #: 12
Topic #: 5
[All NSK100 Questions]

Which two use cases would be considered examples of Shadow IT within an organization? (Choose two.)

Show Suggested Answer Hide Answer
Suggested Answer: C, D

Shadow IT is the term for the unauthorized use of IT resources and functions by employees within an organization. It can include cloud services, software, and hardware that are not approved or managed by the IT department. Two use cases that would be considered examples of shadow IT within an organization are: an unsanctioned Microsoft 365 OneDrive account being used by a corporate user to upload sensitive data and an unsanctioned Google Drive account used by a corporate user to upload non-sensitive data. In both cases, the corporate user is using a personal cloud storage service that is not sanctioned by the organization to store work-related data. This can introduce security risks, such as data leakage, data loss, compliance violations, malware infections, etc. The IT department may not have visibility or control over these cloud services or the data stored in them.Reference:What is shadow IT? | CloudflareWhat is Shadow IT? | IBM


by Johnna at Mar 09, 2024, 03:10 PM

Limited Time Offer

25%

Off

Get Premium NSK100 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel
Coral
7 months ago
I see your point, Johna. Using sanctioned accounts for unauthorized purposes can still pose security risks.
upvoted 0 times
...
Johna
7 months ago
I believe option A is also a form of Shadow IT, as it involves using a sanctioned account for non-sensitive data.
upvoted 0 times
...
Ceola
7 months ago
I agree with you, Kayleigh. Using unsanctioned accounts for sensitive data is a big risk.
upvoted 0 times
...
Kayleigh
7 months ago
I think option C and D would be examples of Shadow IT.
upvoted 0 times
...
Della
8 months ago
Ha! That's a good point. I bet the exam writers are trying to catch us out with that one. They're probably sitting back and laughing at us right now.
upvoted 0 times
Jill
8 months ago
C) an unsanctioned Microsoft 365 OneDrive account being used by a corporate user to upload sensitive data
upvoted 0 times
...
Karma
8 months ago
A) a sanctioned Salesforce account used by a contractor to upload non-sensitive data
upvoted 0 times
...
...
Mari
8 months ago
Hold on, I'm not so sure about that. What about A? Isn't a sanctioned Salesforce account still considered Shadow IT if the data being uploaded is non-sensitive?
upvoted 0 times
...
Sylvia
8 months ago
Hmm, I think C and D are the obvious choices here. Anything unsanctioned by the company is considered Shadow IT, right?
upvoted 0 times
...
Lashanda
8 months ago
This exam question is so tricky! I'm not sure if I should even attempt it. Shadow IT is like the dark side of the force, you know?
upvoted 0 times
...

Save Cancel
az-700  pass4success  az-104  200-301  200-201  cissp  350-401  350-201  350-501  350-601  350-801  350-901  az-720  az-305  pl-300  

Warning: Cannot modify header information - headers already sent by (output started at /pass.php:70) in /pass.php on line 77