Question 1

Which are the two packets that are used in WCCP discovery process? (Choose all that apply) (a) HERE_I_AM (b) HOME_ROUTER_IP: (c) I_SEE_YOU (d) WEB_CACHE_HERE

Accepted Answer

A)  All of the above 
B)  a, b & c only 
C)  b & d only 
D)  a & c only

Question 2

The ProxySG gives you the ability to write policies through.

Accepted Answer

A)  the graphical visual Policy Manager and/or the command-line interface 
B)  Visual Policy Manager only 
C)  the graphical visual Policy Manager, the command-line interface and/or imported text file

Question 3

What is the default time to cache authentication credentials in ProxySG for an authentication realm?

Accepted Answer

A)  15 minutes 
B)  30 minutes 
C)  60 minutes 
D)  90 minutes

Question 4

If you set a service attribute on the ProxySG to "Reflect Client IP", what must you make sure is not going to happen in the network?

Accepted Answer

A)  The service destination IP is set to "transparent" and Action is set to "Intercept". 
B)  Force Authentication through policy. 
C)  Asymmetric routing directly from client to OCS.

Question 5

Which of the following statements are true about WCCP? (Choose all that apply) (a) WCCP version 1 only redirects traffic based on TCP destination port 80 while WCCP version 2 can redirect more than just port 80. (b) WCCP version 1 supports only single proxy while WCCP version 2 can support up to 32 proxies in a single service group. (c) WCCP version 1 is the default version supported by ProxySG unless configured otherwise. (d) WCCP version 2 is more suitable for multiple router deployment as it allows multicast discovery.

Accepted Answer

A)  a & b only 
B)  b & d only 
C)  a & d only 
D)  a & c only

Question 6

What preconditions should be satisfied in order to do initial configuration from a client computer via the URL https://proxysg.bluecodt.com:8083? (choose all that apply) (a) Client computer should be directly connected to ProxySG with a cross-over cable (b) ProxySG should have a pass-through card (c) ProxySG should be deployed in the bridging mode

Accepted Answer

A)  a & b only 
B)  a & c only 
C)  b & c only 
D)  All of the above

Question 7

User with administrative rights can stop ProxyClient as a Windows service.

Accepted Answer

A) True 
 B)False

Question 8

Is Management Console accessible over HTTP?

Accepted Answer

A)  Yes, it is enabled by default, except in FIPS mode 
B)  It can be explicitly enabled, the default port is 8081 
C)  It can be explicitly enabled, the default port is 8082 
D)  A new service has to be created with port selected by the administrator

Question 9

Which is NOT a support- related site for Blue Coat products?

Accepted Answer

A)  http://forums.bluecoot.com 
B)  http://services.bluecoat.com 
C)  http://download.bluecoat.com 
D)  http://webpulse.bluecoat.com

Question 10

Which option is NOT available to upload logfiles from ProxySG?

Accepted Answer

A)  HTTP server 
B)  FTP server 
C)  Blue Coat Reporter server 
D)  CIFS/SAMBA file server

Question 11

An administrator created a PIN for the ProxySG front panel, disabled the built-in administrative account and introduced policy-based admin authoritarian, and secured die serial port. After this was done, all the PINs, passwords and policy settings were lost. What options are available to regain access to the appliance? (Choose all that apply) (a) Return ProxySG appliance to Blue Coat to restore a default SGCS image (b) Restore the factory settings by pressing and holding a reset button for 5 seconds, configure the appliance anew or restore its configuration from a backup (c) Try out all 10000 combinations of PIN for the front panel until you find the right one (d) Remove the hard disk from the ProxySG, connect it as an external SAT A disk to any Windows or Linux computer; clear the admin entry in the /etc/ pssswd file on that disk. Put the hard disk back in ProxySG, start it up and reset the admin's password.

Accepted Answer

A)  a only 
B)  a & b only 
C)  a & c only 
D)  a & d only 
E)  All of the above

Question 12

Management Console of ProxySG (SGOS v. 5.4- or earlier) is based on the following client-side technology:

Accepted Answer

A)  FIPS mode improves browser support 
B)  Java servlet application 
C)  JVM applet embedded in the Web page 
D)  Adobe Flex 
E)  AJAX and JavaScript

Question 13

Licensing of the Proxy AV is done through the ProxySG interface.

Accepted Answer

A) True 
 B)False

Question 14

Which function is NOT a characteristic feature of proxy servers?

Accepted Answer

A)  Making requests in the Internet, using HTTP, FTP, SOCKS on behalf of other clients 
B)  IP Masquerading - replacing original requestor's address with it's own 
C)  Encapsulating one protocol into another protocol 
D)  Caching previously requested resources

Question 15

Which statement is true about a ProxySG with factory settings:

Accepted Answer

A)  To get network access, initial setup is necessary - ProxySG does not have an IP address until then 
B)  Unconfigured ProxySG responds to some of the pre-built IP addresses, which are contained in the private IP address ranges 10.0.0.0/255.0.0.0 and 172.16.0.0/255.240.0.0 and 192.168.0.0/255.255.0.0 . 
C)  Unconfigured ProxySG tries to obtain IP address from a DHCP server 
D)  Unconfigured ProxySG sends RARP request to look up its IP address from the MAC address of its network interface card. If it cannot get a valid IP address, initial setup is required.

Question 16

A policy configured in VPM contains several Web Access layers, each contains several rules. Where a policy rule should be placed to ensure that it is always invoked and its action (e.g. ALLOW or DENY) is not overridden by any other rule?

Accepted Answer

A)  First in the first layer 
B)  First in the last layer 
C)  Last in the first layer 
D)  Last in the last layer

Question 17

Which of the following statements are true? (Choose all that apply) (a) Exceptions and notifications can be configured to use specific HTTP response codes. (b) Exceptions and notify user objects can be created through the VPM. (c) Exceptions and notify user objects can be utilized as action objects in the VPM. (d) Exceptions and notify user objects can include substitutions such as the IP address, username or category.

Accepted Answer

A)  a & b only 
B)  a, c & d only 
C)  b & c only 
D)  a, b & c only

Question 18

Which of the following tasks could be performed from the Blue Coat Management Console? (Choose all that apply) (a) SG Initial Setup (b) Authentication Realm Configuration (c) Bandwidth Class Configuration (d) Resetting Trial Period

Accepted Answer

A)  a & b only 
B)  b & c only 
C)  c & d only 
D)  All of the above

Question 19

The default policy for ProxySG is DENY. Network administrator creates a VPM policy allowing access to some Web host only for certain users (see picture). When installing this policy, ProxySG issues a warning that this rule will be ignored. What change can be applied in order to fix this?

Accepted Answer

A)  Add another rule to the Web Access layer creating an exception for users NOT allowed to access the host. 
B)  Add another Web Access layer and set its default action to Allow. 
C)  Add Web Authentication layer with a rule having Force Authenticate action. 
D)  Add Web content layer with a rule preventing serving content from ProxySG cache to unauthorized users.

Question 20

Which of the following categorization method incur additional costs (not covered by ProxySG and BCWF licenses)?

Accepted Answer

A)  Local Database Categorization 
B)  IWF Categorization 
C)  SurfControl Categorization 
D)  DRTR Categorization

Exam 1: Blue Coat Certified ProxySG Administrator