Question 1

What is a precondition for using L2 MAC rewrite with WCCP?

Accepted Answer

A)  The LAN where WCCP router and ProxySG are located should use IPv6 
B)  No forwarding should be defined for ProxySG 
C)  ProxySG and router should be in the same broadcast domain 
A)  The LAN where WCCP router and ProxySG are located should use IPv6 
B)  No forwarding should be defined for ProxySG 
C)  ProxySG and router should be in the same broadcast domain

Question 2

In explicit proxy, what will happen to a connection that is made when there is no such service running in the ProxySG?

Accepted Answer

A)  Connection will be intercepted. 
B)  Connection will be rejected. 
C)  Connection will by be bypassed. 
D)  Connection will be forwarded. 
A)  Connection will be intercepted. 
B)  Connection will be rejected. 
C)  Connection will by be bypassed. 
D)  Connection will be forwarded.

Question 3

Which of the following statements are true about Reverse Proxy deployment? (Choose all that apply) (a) Forwarding hosts in the forwarding file must be defined as "server" style (b) Default-scheme in forwarding file is supported (c) Protocol conversion between HTTPS HTTP are automatic (d) ProxySG should be set with default DENY policy

Accepted Answer

A)  a, b & c only 
B)  a, c & d only 
C)  b, c & d only 
D)  All of the above 
A)  a, b & c only 
B)  a, c & d only 
C)  b, c & d only 
D)  All of the above

Question 4

Which of the following are true when attempting to deny access to file types?

Accepted Answer

A)  MIME type objects are matched against the Content-type request header; File Extension objects are matched against the GET response header; Apparent Data Type objects are matched against request data. 
B)  MIME type objects are matched against the Content-type response header; File Extension objects are matched against the GET request header; Apparent Data Type objects are matched against response data. 
C)  MIME type objects are matched against the Content-encoding response header; File Extension objects are matched against the GET request header; Apparent Data Type objects are matched against response data. 
D)  MIME type objects are matched against the Content-type response header; File Extension objects are matched against the GET request header; Apparent Data Type objects are matched against request data. 
A)  MIME type objects are matched against the Content-type request header; File Extension objects are matched against the GET response header; Apparent Data Type objects are matched against request data. 
B)  MIME type objects are matched against the Content-type response header; File Extension objects are matched against the GET request header; Apparent Data Type objects are matched against response data. 
C)  MIME type objects are matched against the Content-encoding response header; File Extension objects are matched against the GET request header; Apparent Data Type objects are matched against response data. 
D)  MIME type objects are matched against the Content-type response header; File Extension objects are matched against the GET request header; Apparent Data Type objects are matched against request data.

Question 5

When writing CPL, should layers containing the most general rules usually appear near the beginning or the end of a policy file?

Accepted Answer

A)  Near the beginning. 
B)  Near the end 
A)  Near the beginning. 
B)  Near the end

Question 6

An HTTP request containing which header instructs the content server to return whether the requested object has been modified since the last visit?

Accepted Answer

A)  Pragma: no-cache 
B)  GET If-Modified-Since 
C)  Cache-control: max-age 
D)  None of the above 
A)  Pragma: no-cache 
B)  GET If-Modified-Since 
C)  Cache-control: max-age 
D)  None of the above

Question 7

What criterion is NOT used to determine location awareness of a ProxyClient

Accepted Answer

A)  IP address range 
B)  Virtual NICs IP address range 
C)  The IP address of the closest AND concentrator 
D)  DNS server IP address 
A)  IP address range 
B)  Virtual NICs IP address range 
C)  The IP address of the closest AND concentrator 
D)  DNS server IP address

Question 8

What is the meaning of the metacharacter \ (backslash) in regular expressions?

Accepted Answer

A)  escape character 
B)  any character except newline 
C)  zero or character 
D)  zero or more character 
A)  escape character 
B)  any character except newline 
C)  zero or character 
D)  zero or more character

Question 9

Which policy file can be automatically updated when the ProxySG detects changes to an external source?

Accepted Answer

A)  Threat protection policy file. 
B)  Central policy file. 
C)  Forward policy file. 
D)  Local policy file. 
A)  Threat protection policy file. 
B)  Central policy file. 
C)  Forward policy file. 
D)  Local policy file.

Question 10

Which client deployment methods support the 407 Proxy Authentication Required response code? (Choose all that apply) (a) Proxy Auto Configuration files (b) WCCP (c) Proxy settings in browser (d) Inline Bridging

Accepted Answer

A)  a & b only 
B)  b & c only 
C)  c & d only 
D)  a & c only 
E)  All of the above 
A)  a & b only 
B)  b & c only 
C)  c & d only 
D)  a & c only 
E)  All of the above

Question 11

Is it possible to run more than one version of a BCAAA processor on a Windows computer?

Accepted Answer

A)  Yes 
B)  No 
A)  Yes 
B)  No

Question 12

To create policy that tests only for the authentication error of expired_credentials, can you use the VPM, CPL, or either?

Accepted Answer

A)  VPM 
B)  CPL 
C)  Either 
A)  VPM 
B)  CPL 
C)  Either

Question 13

Which of the following statements are true about ProxySG Protocol Detection feature? (Choose all that apply) (a) Protocol detection is performed on the server's response. (b) Protocol detection is performed on the client's request. (c) Enabling Detect Protocol option will automatically enable early intercept attribute in proxy services. (d) Protocol detection is performed by looking at the TCP port number.

Accepted Answer

A)  a & b only 
B)  b & c only 
C)  c & d only 
D)  All of the above 
A)  a & b only 
B)  b & c only 
C)  c & d only 
D)  All of the above

Question 14

Which one of these statements best describes how policy checkpoints evaluate the installed policy on a ProxySG?

Accepted Answer

A)  The Client In checkpoint decides which rules will be evaluated by the other checkpoints. 
B)  At each checkpoint, a decision is made whether to allow or deny the transaction. 
C)  The Server In checkpoint decides which rules will be evaluated by the other checkpoints. 
D)  Relevant rules are evaluated at each checkpoint based on the information about the transaction that is available at that point. 
A)  The Client In checkpoint decides which rules will be evaluated by the other checkpoints. 
B)  At each checkpoint, a decision is made whether to allow or deny the transaction. 
C)  The Server In checkpoint decides which rules will be evaluated by the other checkpoints. 
D)  Relevant rules are evaluated at each checkpoint based on the information about the transaction that is available at that point.

Question 15

Which of the following steps have to be performed to support Kerberos Authentication? (Choose all that apply) (a) A virtual URL that resolves to the IP of the ProxySG. (b) Registering the BCAAA as a Service Principal Name. (c) Configuring IWA Realm. (d) Configuring Explicit Proxy.

Accepted Answer

A)  All of the above 
B)  None of the above 
C)  a, b & c only 
D)  b, c & d only 
A)  All of the above 
B)  None of the above 
C)  a, b & c only 
D)  b, c & d only

Question 16

ProxySG can cache videos played by Adobe Flash based video player (e.g. on YouTube) as HTTP objects.

Accepted Answer

A) True 
 B)False

Question 17

Bandwidth minimum does not work in an explicit deployment model.

Accepted Answer

A) True 
 B)False

Question 18

What type of filesystem does SGOS use?

Accepted Answer

A)  ZFS 
B)  NTFS 
C)  FAT32 
D)  None of the above 
A)  ZFS 
B)  NTFS 
C)  FAT32 
D)  None of the above

Question 19

Which statement is correct about Proxy-Authorization header?

Accepted Answer

A)  It is a response header used by a proxy to negotiate parameters of the credential exchange and to send challenge to the client 
B)  It is a request header used to pass client's credentials to a proxy server 
C)  It is a response header used by an upstream proxy to ask for credentials from a downstream proxy or user agent 
A)  It is a response header used by a proxy to negotiate parameters of the credential exchange and to send challenge to the client 
B)  It is a request header used to pass client's credentials to a proxy server 
C)  It is a response header used by an upstream proxy to ask for credentials from a downstream proxy or user agent

Question 20

The bcreportermain_v1 access log format has a configurable ordering of fields, and this custom order is reflected in a log file header.

Accepted Answer

A) True 
 B)False

What is a precondition for using L2 MAC rewrite with WCCP?

In explicit proxy, what will happen to a connection that is made when there is no such service running in the ProxySG?

Which of the following are true when attempting to deny access to file types?

When writing CPL, should layers containing the most general rules usually appear near the beginning or the end of a policy file?

An HTTP request containing which header instructs the content server to return whether the requested object has been modified since the last visit?

What criterion is NOT used to determine location awareness of a ProxyClient

What is the meaning of the metacharacter \ (backslash) in regular expressions?

Which policy file can be automatically updated when the ProxySG detects changes to an external source?

Which client deployment methods support the 407 Proxy Authentication Required response code? (Choose all that apply) (a) Proxy Auto Configuration files (b) WCCP (c) Proxy settings in browser (d) Inline Bridging

Is it possible to run more than one version of a BCAAA processor on a Windows computer?

To create policy that tests only for the authentication error of expired_credentials, can you use the VPM, CPL, or either?

Which one of these statements best describes how policy checkpoints evaluate the installed policy on a ProxySG?

Which of the following steps have to be performed to support Kerberos Authentication? (Choose all that apply) (a) A virtual URL that resolves to the IP of the ProxySG. (b) Registering the BCAAA as a Service Principal Name. (c) Configuring IWA Realm. (d) Configuring Explicit Proxy.

ProxySG can cache videos played by Adobe Flash based video player (e.g. on YouTube) as HTTP objects.

Bandwidth minimum does not work in an explicit deployment model.

What type of filesystem does SGOS use?

Which statement is correct about Proxy-Authorization header?

The bcreportermain_v1 access log format has a configurable ordering of fields, and this custom order is reflected in a log file header.

Blue Coat Certified ProxySG Administrator

Filters

Exam 2: Blue Coat Certified ProxySG Professional

What is a precondition for using L2 MAC rewrite with WCCP?

In explicit proxy, what will happen to a connection that is made when there is no such service running in the ProxySG?

Which of the following are true when attempting to deny access to file types?

When writing CPL, should layers containing the most general rules usually appear near the beginning or the end of a policy file?

An HTTP request containing which header instructs the content server to return whether the requested object has been modified since the last visit?

What criterion is NOT used to determine location awareness of a ProxyClient

What is the meaning of the metacharacter \ (backslash) in regular expressions?

Which policy file can be automatically updated when the ProxySG detects changes to an external source?

Which client deployment methods support the 407 Proxy Authentication Required response code? (Choose all that apply) (a) Proxy Auto Configuration files (b) WCCP (c) Proxy settings in browser (d) Inline Bridging

Is it possible to run more than one version of a BCAAA processor on a Windows computer?

To create policy that tests only for the authentication error of expired_credentials, can you use the VPM, CPL, or either?

Which one of these statements best describes how policy checkpoints evaluate the installed policy on a ProxySG?

Which of the following steps have to be performed to support Kerberos Authentication? (Choose all that apply) (a) A virtual URL that resolves to the IP of the ProxySG. (b) Registering the BCAAA as a Service Principal Name. (c) Configuring IWA Realm. (d) Configuring Explicit Proxy.

ProxySG can cache videos played by Adobe Flash based video player (e.g. on YouTube) as HTTP objects.

Bandwidth minimum does not work in an explicit deployment model.

What type of filesystem does SGOS use?

Which statement is correct about Proxy-Authorization header?

The bcreportermain_v1 access log format has a configurable ordering of fields, and this custom order is reflected in a log file header.

Blue Coat Certified ProxySG Administrator

Filters