Exam 2: Blue Coat Certified ProxySG Professional

What are the available actions for any given category, when defining ProxyClient content filtering configuration? (Choose all that apply) (a) Allow (b) Deny (c) Temporanily Allow (d) Warm

What are the two main functions of configuring forwarding in ProxySG? (Choose all that apply) (a) To accelerate application (b) Reverse Proxy (c) To support Proxy Chaining (d) To intercept SSL

Which of the following statements are true about dynamic bypass list? (Choose all that apply) (a) Configured polices will not be enforced on client request if the request matches an entry in the bypass list. (b) Dynamic bypass entries are lost when ProxySG is restarted (c) If request made to a site in a forwarding policy is in the bypass list, the site is inaccessible (d) Dynamic bypass parameters can be configured on Management Console and CLI.

By default, what type of authentication challenge will the user-agent receive if the authentication node is set to AUTO?

When a ProxyClient setup file is manually on a client's computer, what data transfer takes place before ProxyClient is installed?

When creating a policy-driven trace, which CPL property specifies the name of the policy trace file into which matching transactions are traced?

Steaming traffic is better managed by using ProxySG's admission control features.

If a user agent that does not support authentication tries to request content through a connection on which the ProxySG requires authentication, how can you best resolve the issue?

When a TCP health check responds as "healthy" then

What are the advantages that you may get in deploying ProxySG with WCCP? (Choose all the apply) (a) Scalability (b) Redundancy (c) Load Balancing (d) Security

ProxySG is configured to permit error but guest authentication is not configured. What will happen to a user who initiates a connection to the Internet?

Which of the following access log formats are supported by the ProxySG? (Choose all that apply) (a) ELFF (b) SQUID (c) Websense (d) NCSA

When configuring reverse proxy with SSL, what are the 3 possible options of ensuring host affinity? (Choose all that apply) (a) client-ip (b) ssl-session-id (c) accelerator-cookie (d) server-ip

Which of the following format can be used in troubleshooting authortization and authorization related problems in ProxySG? (Choose all that apply) (a) x-sc-authentication-error (b) x-sc-authentication-timeout (c) x-sc-authorlzation-error (d) x-sc-authorization-timeout

Which regular expression should you test against a URL to match both http and https schemes?

Which of the following are obvious advantages of having a ProxySG deployed in a Reverse Proxy environment? (Choose all that apply) (a)The ProxySG has built in DOS protection to guard the actual web server from denial-ofservice attacks (b) Increased performance with caching provides an improved Web Experience (c) Consistent default behavior of cache expiration and validation directives (d) SSL termination on ProxySG allow SSL offloading, therefore eliminating bottleneck on the web server side.

Which authentication modes would result in a user-agent receiving a HTTP 401-Unauthorized status codes from the proxy? (Choose all that apply) (a) origin-ip-redirect (b) proxy-ip (c) origin-cookie (d) form-cookie-redirect

Which of the following cashing techniques utilize retrieval workers to keep the contents of the cache fresh? (Choose all that apply.) (a) Cost-based Deletion (b) Asynchronous Adaptive Refresh (c) Popularity Contest

The Content-encoding header is used to declare the MIME type and compression method used in a HTTP response.

The authentication mode origin-ip-redirect allows an administrator to assign a Time To Live (TTL) for the surrogate credentials. Meanwhile the authentication mode origin-cookie-redirect does not provide this feature.