Question 1

In CPL, rules that have similar syntax can be grouped into what?

Accepted Answer

A)  Actions 
B)  Layer guards 
C)  Triggers 
D)  Sections 
A)  Actions 
B)  Layer guards 
C)  Triggers 
D)  Sections

Question 2

Which of the following options are configured when implementing failover on ProxySG appliances? (Choose all that apply) (a) Multicast address for advertisements (b) Relative Priority (c) Virtual MAC address (d) Group Secret to hash information sent in multicast announcements

Accepted Answer

A)  a, b & c only 
B)  b, c & d only 
C)  a, b & d only 
D)  All of the above 
A)  a, b & c only 
B)  b, c & d only 
C)  a, b & d only 
D)  All of the above

Question 3

Which of the following steps are not required when configuring a transparently deployed ProxySG to intercept HTTPS traffic?

Accepted Answer

A)  Create a SSL intercept layer in the VPM. 
B)  Enable a SSL service on port 443. 
C)  Assign a key ring to the SSL proxy. 
D)  Create a SSL access layer in the VPM. 
A)  Create a SSL intercept layer in the VPM. 
B)  Enable a SSL service on port 443. 
C)  Assign a key ring to the SSL proxy. 
D)  Create a SSL access layer in the VPM.

Question 4

Which method of controlling downloads of certain file types has the LOWEST efficiency in terms of response time, bandwidth use and execution time on ProxySG?

Accepted Answer

A)  Apparent Data Type 
B)  MIME Type 
C)  File extension 
A)  Apparent Data Type 
B)  MIME Type 
C)  File extension

Question 5

Which of these possible problems does a nearly-full ProxySG disk indicate? (Select all that apply)

Accepted Answer

A)  This ProxySG should be upgraded to a more powerful model. 
B)  One or more additional ProxySG appliances should be deployed in this network. 
C)  Caching parameters are improperly set in the Management Console. 
D)  None; this is a normal condition. 
A)  This ProxySG should be upgraded to a more powerful model. 
B)  One or more additional ProxySG appliances should be deployed in this network. 
C)  Caching parameters are improperly set in the Management Console. 
D)  None; this is a normal condition.

Question 6

What is the meaning of the metacharacter * (asterisk) in regular expressions?

Accepted Answer

A)  escape character 
B)  any character except newline 
C)  zero or character 
D)  zero or more characters 
A)  escape character 
B)  any character except newline 
C)  zero or character 
D)  zero or more characters

Question 7

If a user cannot be derived through the Window SSO realm, then the client will .

Accepted Answer

A)  be prompted with an authentication dialog box to provide credentials. 
B)  receive an authentication error from the proxy. 
C)  proceed as an unauthenticated user. 
D)  receive an authentication form from the proxy to provide credentials. 
A)  be prompted with an authentication dialog box to provide credentials. 
B)  receive an authentication error from the proxy. 
C)  proceed as an unauthenticated user. 
D)  receive an authentication form from the proxy to provide credentials.

Question 8

Who plays the role of the trusted third party, when client and server communicate via Kerberos?

Accepted Answer

A)  NTLM (NT LAN Manager) 
B)  KDC (Key Distribution Center) 
C)  PKI (Public Key Infrastructure) 
D)  SSL Certificate Authority 
A)  NTLM (NT LAN Manager) 
B)  KDC (Key Distribution Center) 
C)  PKI (Public Key Infrastructure) 
D)  SSL Certificate Authority

Question 9

At which checkpoint does the rewrite_url_prefix perform the TWURL modification?

Accepted Answer

A)  Client In 
B)  Client Out 
C)  Server In 
D)  Server Out 
A)  Client In 
B)  Client Out 
C)  Server In 
D)  Server Out

Question 10

There is a hard coded limit to the number of concurrent connections allowed through the ProxySG.

Accepted Answer

A) True 
 B)False

Question 11

In a CPL back reference of the form $(n), are references numbered from right to left or from left to right?

Accepted Answer

A)  Left to right 
B)  Right to left 
A)  Left to right 
B)  Right to left

Question 12

In an SSL transaction in which the server's certificate is not from a trusted authority, which entity generates the warning that is displayed in a web browser?

Accepted Answer

A)  The web browser. 
B)  The server. 
C)  The ProxySG. 
D)  The answer depends on how the ProxySG has been configured. 
A)  The web browser. 
B)  The server. 
C)  The ProxySG. 
D)  The answer depends on how the ProxySG has been configured.

Question 13

The Access Control List (ACL) option in the management console (configured by the menu item Configuration >Authentication >Console access) will be enforced for which types of administrative accounts? (Choose all that apply) (a) LDAP realm account (b) Local realm account (c) Built-in account (d) IWA realm account

Accepted Answer

A)  All of the above 
B)  a & b only 
C)  c only 
D)  c & d only 
E)  None of the above 
A)  All of the above 
B)  a & b only 
C)  c only 
D)  c & d only 
E)  None of the above

Question 14

What are the possible ways of creating bandwidth classes? (a) Using Management Console (b) Defining them in a JavaScript file and uploading it to ProxySG (c) Using CLI

Accepted Answer

A)  a & b only 
B)  a & c only 
C)  b & c only 
D)  All of the above 
A)  a & b only 
B)  a & c only 
C)  b & c only 
D)  All of the above

Question 15

After creating CPL in the local policy file, the policy is imported into the VPM CPL file so that it can be viewed through the Visual Policy Manager.

Accepted Answer

A) True 
 B)False

Question 16

In ProxyAV anti-virus scanners are ____

Accepted Answer

A)  multiple parallel threads sharing the same code and the same address space 
B)  multiple parallel processes not sharing the same address space 
C)  asynchronous calls to remote scanner hardware 
D)  synchronous procedure calls within ProxyAV 
A)  multiple parallel threads sharing the same code and the same address space 
B)  multiple parallel processes not sharing the same address space 
C)  asynchronous calls to remote scanner hardware 
D)  synchronous procedure calls within ProxyAV

Question 17

Which of the following is NOT true about global and per-rule policy tracing?

Accepted Answer

A)  Each object processed by the ProxySG generates an entry in the global policy trace and appears in a rule-based trace if the object triggers a rule. 
B)  Global policy tracing may severely affect the performance of a production ProxySG. 
C)  You can enable global tracing through the Management Console or CLI. 
D)  You can enable per-rule tracing through the Management Console. 
A)  Each object processed by the ProxySG generates an entry in the global policy trace and appears in a rule-based trace if the object triggers a rule. 
B)  Global policy tracing may severely affect the performance of a production ProxySG. 
C)  You can enable global tracing through the Management Console or CLI. 
D)  You can enable per-rule tracing through the Management Console.

Question 18

The ProxySG policy engine allows an administrator to create policy based on any MIME type, File Extension or File Signature (first bytes in the response body).

Accepted Answer

A) True 
 B)False

Question 19

Which of the following authentication mode will allow you to visibly challenge the user upon inactivity timeout? (Choose all that apply) (a) Form based authentication (b) Cookie Surrogate (c) IP surrogate (d) Session based surrogate a & b only

Accepted Answer

A)  a & b only 
B)  b & c only 
C)  c & d only 
D)  d & a only 
E)  All of the above 
A)  a & b only 
B)  b & c only 
C)  c & d only 
D)  d & a only 
E)  All of the above

Question 20

In which of the following ways can Access Logging be enabled? (Choose all that apply.) (a) By a CLI command (b) In the Management Console under Access Logging (C) By adding another layer to VPM policy

Accepted Answer

A)  a & b only 
B)  a & c only 
C)  b & c only 
D)  All of the above 
A)  a & b only 
B)  a & c only 
C)  b & c only 
D)  All of the above

In CPL, rules that have similar syntax can be grouped into what?

Which of the following options are configured when implementing failover on ProxySG appliances? (Choose all that apply) (a) Multicast address for advertisements (b) Relative Priority (c) Virtual MAC address (d) Group Secret to hash information sent in multicast announcements

Which of the following steps are not required when configuring a transparently deployed ProxySG to intercept HTTPS traffic?

Which method of controlling downloads of certain file types has the LOWEST efficiency in terms of response time, bandwidth use and execution time on ProxySG?

Which of these possible problems does a nearly-full ProxySG disk indicate? (Select all that apply)

What is the meaning of the metacharacter * (asterisk) in regular expressions?

If a user cannot be derived through the Window SSO realm, then the client will .

Who plays the role of the trusted third party, when client and server communicate via Kerberos?

At which checkpoint does the rewrite_url_prefix perform the TWURL modification?

There is a hard coded limit to the number of concurrent connections allowed through the ProxySG.

In a CPL back reference of the form $(n), are references numbered from right to left or from left to right?

In an SSL transaction in which the server's certificate is not from a trusted authority, which entity generates the warning that is displayed in a web browser?

What are the possible ways of creating bandwidth classes? (a) Using Management Console (b) Defining them in a JavaScript file and uploading it to ProxySG (c) Using CLI

After creating CPL in the local policy file, the policy is imported into the VPM CPL file so that it can be viewed through the Visual Policy Manager.

In ProxyAV anti-virus scanners are ____

Which of the following is NOT true about global and per-rule policy tracing?

The ProxySG policy engine allows an administrator to create policy based on any MIME type, File Extension or File Signature (first bytes in the response body).

Which of the following authentication mode will allow you to visibly challenge the user upon inactivity timeout? (Choose all that apply) (a) Form based authentication (b) Cookie Surrogate (c) IP surrogate (d) Session based surrogate a & b only

In which of the following ways can Access Logging be enabled? (Choose all that apply.) (a) By a CLI command (b) In the Management Console under Access Logging (C) By adding another layer to VPM policy

Blue Coat Certified ProxySG Administrator

Filters

Exam 2: Blue Coat Certified ProxySG Professional

In CPL, rules that have similar syntax can be grouped into what?

Which of the following options are configured when implementing failover on ProxySG appliances? (Choose all that apply) (a) Multicast address for advertisements (b) Relative Priority (c) Virtual MAC address (d) Group Secret to hash information sent in multicast announcements

Which of the following steps are not required when configuring a transparently deployed ProxySG to intercept HTTPS traffic?

Which method of controlling downloads of certain file types has the LOWEST efficiency in terms of response time, bandwidth use and execution time on ProxySG?

Which of these possible problems does a nearly-full ProxySG disk indicate? (Select all that apply)

What is the meaning of the metacharacter * (asterisk) in regular expressions?

If a user cannot be derived through the Window SSO realm, then the client will .

Who plays the role of the trusted third party, when client and server communicate via Kerberos?

At which checkpoint does the rewrite_url_prefix perform the TWURL modification?

There is a hard coded limit to the number of concurrent connections allowed through the ProxySG.

In a CPL back reference of the form $(n), are references numbered from right to left or from left to right?

In an SSL transaction in which the server's certificate is not from a trusted authority, which entity generates the warning that is displayed in a web browser?

What are the possible ways of creating bandwidth classes? (a) Using Management Console (b) Defining them in a JavaScript file and uploading it to ProxySG (c) Using CLI

After creating CPL in the local policy file, the policy is imported into the VPM CPL file so that it can be viewed through the Visual Policy Manager.

In ProxyAV anti-virus scanners are ____

Which of the following is NOT true about global and per-rule policy tracing?

The ProxySG policy engine allows an administrator to create policy based on any MIME type, File Extension or File Signature (first bytes in the response body).

Which of the following authentication mode will allow you to visibly challenge the user upon inactivity timeout? (Choose all that apply) (a) Form based authentication (b) Cookie Surrogate (c) IP surrogate (d) Session based surrogate a & b only

In which of the following ways can Access Logging be enabled? (Choose all that apply.) (a) By a CLI command (b) In the Management Console under Access Logging (C) By adding another layer to VPM policy

Blue Coat Certified ProxySG Administrator

Filters