Question 1

Which of the following statements are true about Bandwidth Management Hierarchies and Priorities? (Choose all that apply) (a) Child classes can have children of their own. (b) If no limit is set, packets are sent as soon as they arrive. (c) Priorities are set to a class to give precedence over other classes. (d) If there is excess bandwidth, the child class will always get the first opportunity to use it.

Accepted Answer

A)   a, b & c only
B)   a, b & d only
C)   b, c & d only
D)   All of the above A

Question 2

Which method of controlling downloads of certain file types works fastest on ProxySG?

Accepted Answer

A)   Apparent Data Type
B)   MIME Type
C)   File extension C

Question 3

If a CPL rule contains more than one trigger, how are the triggers evaluated?

Accepted Answer

A)   Only the last trigger is evaluated.
B)   They are logically ORed together; any one of them must be true for the rule to match.
C)   They are logically ANDed together; all of them must be true for the rule to match.
D)   Only the first trigger is evaluated.
E)   The answer depends on the type of layer. B

Question 4

While configuring Blue Coat directory, what is an Overlay?

Accepted Answer

A)   A few selected setting used to replace some of the configuration in ProxySG.
B)   A snapshot of all the configuration in ProxySG.

Question 5

When a client receives an HTTP 302 response from a server, the client will form a new request based on the header.

Accepted Answer

A)   Forward
B)   Cookie
C)   Location
D)   Redirect

Question 6

What are the three levels of the ProxySG authentication cache? (Select 3)

Accepted Answer

A)   IP
B)   Authentication
C)   Credential
D)   Surrogate
E)   ProxyF)  Cookie

Question 7

url.regex=!\.html$ d\ DENY What is the effect of the above CPL code?

Accepted Answer

A)   Deny any URL that ends with html
B)   Deny any URL that does not end with html
C)   Deny any URL that ends with htm or html
D)   Deny any URL that does not end with htm or html

Question 8

Apparent Data Type objects can be created in the VPM for which of the following file types? (Choose all that apply) (a) Windows DLL (b) Windows Exe (c) Windows Ocx (d) Windows Cab

Accepted Answer

A)   a, b & c only
B)   b, c & d only
C)   a, c & d only
D)   All of the above

Question 9

You can NOT use a self-signed certificate when intercepting SSL traffic.

Accepted Answer

A) True 
 B)False

Question 10

When a downstream ProxySG requests an object that already is cached in an upstream ProxySG, the downstream ProxySG checks the object's freshness with the origin content server.

Accepted Answer

A) True 
 B)False

Question 11

Which statement is correct about WWW-Authenticate header?

Accepted Answer

A)   It is request header used only with Basic Authentication to send username and password to a proxy or a Web server
B)   It is a request header used to send credentials
C)   It is a response header used with HTTP 401 status code to negotiate method of authentication and send NTLM challenge to the client.

Question 12

When a backup ProxySG takes over because the master fails, which of the following will occur?

Accepted Answer

A)   Policy from the master is replicated on the backup.
B)   A failover event is logged in the event log.
C)   An email notification is sent to the ProxySG administrator.
D)   The backup begins replying to ARPS for the Virtual MAC address.

Question 13

At which checkpoint does the rewrite () perform the TWURL modification?

Accepted Answer

A)   Client In
B)   Client Out
C)   Server In
D)   Server Out

Question 14

Which of the following methods can the Windows SSO utilize to derive a user name? (Choose all that apply) (a) Domain Controller Querying (b) Direct Client Querying (c) Direct Client Querying, if unsuccessful then Domain Controller Querying (d) Domain Controller Querying, if unsuccessful then Direct Client Querying

Accepted Answer

A)   a & b only
B)   a & c only
C)   b & c only
D)   b & d only
E)   All of the above

Question 15

What is the meaning of the metacharacter (question mark) in regular expressions?

Accepted Answer

A)   escape character
B)   any character except newline
C)   zero or one character
D)   zero or more characters

Question 16

Which server certificate validation errors can be ignored within ProxySG policy? (Choose all that apply) (a) Untrusted issuer (b) Host name mismatch (c) Expiration

Accepted Answer

A)   a & b only
B)   b & c only
C)   a & c only
D)   All of the above

Question 17

Which header cannot be sent together with an HTTP 407 status code from the ProxySG?

Accepted Answer

A)   Proxy-Authenticate: Basic="MyRealm"
B)   Proxy-Authenticate: NTLM="MyRealm"
C)   Proxy- Authenticate: Kerberos="MyRealm"
D)   proxy-Authenticate: Negotiate="MyRealm"
E)   All the above headers can be sent with 407 status code

Question 18

Without asking a user or physically inspecting their computer, how can you determine which version of web browser they are using to make requests that are intercepted by the ProxySG? (Select all that apply)

Accepted Answer

A)   By performing packet captures on the ProxySG when that web browser is in use.
B)   By inspecting the ProxySG access log, if access logging is enabled.
C)   By using the VPM realm browser.
D)   You cannot do this.

Question 19

Which of these are the features of a Blue Coat Director? (Choose all that apply) (a) Install and update configurations of a group of ProxySG (b) Distribute and control content of a group of ProxySG (c) Managing SSL VPN configuration (d) Monitoring ProxySG Performance

Accepted Answer

A)   a, b & c only
B)   a, b & d only
C)   b, c & d only
D)   a, c & d only

Question 20

In a transparent proxy that is intercepting HTTP, how can an administrator allow instant messaging over HTTP to pass through ProxySG if they do not have IM license on the ProxySG?

Accepted Answer

A)   By disabling Detect Protocol
B)   By disabling Protocol Handoff in IM
C)   By configuring the proxy services to bypass AOL IM, MSN IM and Yahoo IM services
D)   By disabling early intercept

Exam 2: Blue Coat Certified ProxySG Professional