Your company just had a new Netskope tenant provisioned and you are asked to create...

Upon provisioning a new Netskope tenant, several default settings are configured for ease of initial deployment but should be hardened for production use. Two settings in particular warrant immediate change. First, the “Untrusted Root Certificate” SSL error setting defaults to Bypass, meaning traffic with untrusted certificates is allowed through; this should be changed to Block to enforce strict certificate validation and prevent traffic from potentially malicious or misconfigured servers. Second, the “Disallow concurrent logins by an Admin” setting should be enabled to prevent simultaneous administrative sessions, which reduces the risk of unauthorized access going undetected. The No SNI setting and Safe Search settings, while relevant in certain deployments, are not universally recommended as immediate changes upon tenant provisioning for all organizations.