Question 1

What are the available actions for any given category, when defining ProxyClient content filtering configuration? (Choose all that apply) (a) Allow (b) Deny (c) Temporanily Allow (d) Warm

Accepted Answer

A)  a & b only 
B)  a, b & c only 
C)  a, b & d only 
D)  All of the above

Question 2

What are the two main functions of configuring forwarding in ProxySG? (Choose all that apply) (a) To accelerate application (b) Reverse Proxy (c) To support Proxy Chaining (d) To intercept SSL

Accepted Answer

A)  a & b only 
B)  b & c only 
C)  c & d only 
D)  d & a only

Question 3

Which of the following statements are true about dynamic bypass list? (Choose all that apply) (a) Configured polices will not be enforced on client request if the request matches an entry in the bypass list. (b) Dynamic bypass entries are lost when ProxySG is restarted (c) If request made to a site in a forwarding policy is in the bypass list, the site is inaccessible (d) Dynamic bypass parameters can be configured on Management Console and CLI.

Accepted Answer

A)  All of the above 
B)  a, b & c only 
C)  b, c & d only 
D)  a, c & d only

Question 4

By default, what type of authentication challenge will the user-agent receive if the authentication node is set to AUTO?

Accepted Answer

A)  proxy-ip for explicit and transparent clients 
B)  proxy for explicit and origin-cookie-redirect for transparent clients 
C)  proxy for explicit and transparent clients 
D)  proxy-ip for explicit and origin-ip-redirect for transparent clients 
E)  proxy for explicit and proxy-ip for transparent

Question 5

When a ProxyClient setup file is manually on a client's computer, what data transfer takes place before ProxyClient is installed?

Accepted Answer

A)  ProxyClient setup program is self-contained; there is no data transfer necessary in order to complete the installation of the ProxyCinent 
B)  ProxyCilent setup program cause download of the most recent updates from a public download site https://hypersonic.bluecoat.com/. 
C)  ProxyClient setup program transfers data form Client Manager ProxySG appliance before it can install successfully. 
D)  ProxyClient setup program transfers data form the AND manager (or backup AND manager) ProxySG appliance before it can install successfully.

Question 6

When creating a policy-driven trace, which CPL property specifies the name of the policy trace file into which matching transactions are traced?

Accepted Answer

A)  trace.destination() 
B)  trace.request() 
C)  trace.rules() 
D)  None of the above

Question 7

Steaming traffic is better managed by using ProxySG's admission control features.

Accepted Answer

A) True 
 B)False

Question 8

If a user agent that does not support authentication tries to request content through a connection on which the ProxySG requires authentication, how can you best resolve the issue?

Accepted Answer

A)  Identify the TCP ports used by the user agent, and create a proxy service to bypass such traffic. 
B)  Identify an HTTP header that identifies the user agent, and then write policy to exempt matching transactions from authentication. 
C)  Identify the IP address of the user agent, and then write policy to exempt matching transactions from authentication. 
D)  You cannot do this.

Question 9

When a TCP health check responds as "healthy" then

Accepted Answer

A)  the SG is able to successfully establish a TCP handshake to the upstream device. 
B)  the SG is able to successfully resolve the hostname of the upstream device. 
C)  the SG is able to successfully connect to the upstream device on port 80. 
D)  the SG is able to successfully ping the upstream device.

Question 10

What are the advantages that you may get in deploying ProxySG with WCCP? (Choose all the apply) (a) Scalability (b) Redundancy (c) Load Balancing (d) Security

Accepted Answer

A)  All of the above 
B)  a, b & c only 
C)  b, c & d only 
D)  a, b & d only

Question 11

ProxySG is configured to permit error but guest authentication is not configured. What will happen to a user who initiates a connection to the Internet?

Accepted Answer

A)  The user will receive an error notifying unsuccessful authentication. 
B)  The user will be allowed to proceed as a guest user. 
C)  The user will be allowed to proceed as unauthenticated. 
D)  The user will receive an error notifying Access Denied.

Question 12

Which of the following access log formats are supported by the ProxySG? (Choose all that apply) (a) ELFF (b) SQUID (c) Websense (d) NCSA

Accepted Answer

A)  a, b & c only 
B)  a, b & d only 
C)  a, c & d only 
D)  b, c & d only 
E)  All of the above

Question 13

When configuring reverse proxy with SSL, what are the 3 possible options of ensuring host affinity? (Choose all that apply) (a) client-ip (b) ssl-session-id (c) accelerator-cookie (d) server-ip

Accepted Answer

A)  All of the above 
B)  b, c & d only 
C)  a, c & d only 
D)  a, b & c only

Question 14

Which of the following format can be used in troubleshooting authortization and authorization related problems in ProxySG? (Choose all that apply) (a) x-sc-authentication-error (b) x-sc-authentication-timeout (c) x-sc-authorlzation-error (d) x-sc-authorization-timeout

Accepted Answer

A)  a & b only 
B)  b, & c only 
C)  a & c only 
D)  c & d only 
E)  b & d only

Question 15

Which regular expression should you test against a URL to match both http and https schemes?

Accepted Answer

A)  2https? 
B)  [http][https] 
C)  ^https? 
D)  http[s]

Question 16

Which of the following are obvious advantages of having a ProxySG deployed in a Reverse Proxy environment? (Choose all that apply) (a)The ProxySG has built in DOS protection to guard the actual web server from denial-ofservice attacks (b) Increased performance with caching provides an improved Web Experience (c) Consistent default behavior of cache expiration and validation directives (d) SSL termination on ProxySG allow SSL offloading, therefore eliminating bottleneck on the web server side.

Accepted Answer

A)  All of the above 
B)  a, b & c only 
C)  a, b & d only 
D)  b, c & d only

Question 17

Which authentication modes would result in a user-agent receiving a HTTP 401-Unauthorized status codes from the proxy? (Choose all that apply) (a) origin-ip-redirect (b) proxy-ip (c) origin-cookie (d) form-cookie-redirect

Accepted Answer

A)  a & b only 
B)  a & c only 
C)  b & c only 
D)  c & d only 
E)  None of the above

Question 18

Which of the following cashing techniques utilize retrieval workers to keep the contents of the cache fresh? (Choose all that apply.) (a) Cost-based Deletion (b) Asynchronous Adaptive Refresh (c) Popularity Contest

Accepted Answer

A)  a & b only 
B)  b & c only 
C)  All of the above 
D)  b only

Question 19

The Content-encoding header is used to declare the MIME type and compression method used in a HTTP response.

Accepted Answer

A) True 
 B)False

Question 20

The authentication mode origin-ip-redirect allows an administrator to assign a Time To Live (TTL) for the surrogate credentials. Meanwhile the authentication mode origin-cookie-redirect does not provide this feature.

Accepted Answer

A) True 
 B)False

Exam 2: Blue Coat Certified ProxySG Professional

What are the available actions for any given category, when defining ProxyClient content filtering configuration? (Choose all that apply) (a) Allow (b) Deny (c) Temporanily Allow (d) Warm

What are the two main functions of configuring forwarding in ProxySG? (Choose all that apply) (a) To accelerate application (b) Reverse Proxy (c) To support Proxy Chaining (d) To intercept SSL

By default, what type of authentication challenge will the user-agent receive if the authentication node is set to AUTO?

When a ProxyClient setup file is manually on a client's computer, what data transfer takes place before ProxyClient is installed?

When creating a policy-driven trace, which CPL property specifies the name of the policy trace file into which matching transactions are traced?

Steaming traffic is better managed by using ProxySG's admission control features.

If a user agent that does not support authentication tries to request content through a connection on which the ProxySG requires authentication, how can you best resolve the issue?

When a TCP health check responds as "healthy" then

What are the advantages that you may get in deploying ProxySG with WCCP? (Choose all the apply) (a) Scalability (b) Redundancy (c) Load Balancing (d) Security

ProxySG is configured to permit error but guest authentication is not configured. What will happen to a user who initiates a connection to the Internet?

Which of the following access log formats are supported by the ProxySG? (Choose all that apply) (a) ELFF (b) SQUID (c) Websense (d) NCSA

When configuring reverse proxy with SSL, what are the 3 possible options of ensuring host affinity? (Choose all that apply) (a) client-ip (b) ssl-session-id (c) accelerator-cookie (d) server-ip

Which of the following format can be used in troubleshooting authortization and authorization related problems in ProxySG? (Choose all that apply) (a) x-sc-authentication-error (b) x-sc-authentication-timeout (c) x-sc-authorlzation-error (d) x-sc-authorization-timeout

Which regular expression should you test against a URL to match both http and https schemes?

Which authentication modes would result in a user-agent receiving a HTTP 401-Unauthorized status codes from the proxy? (Choose all that apply) (a) origin-ip-redirect (b) proxy-ip (c) origin-cookie (d) form-cookie-redirect

Which of the following cashing techniques utilize retrieval workers to keep the contents of the cache fresh? (Choose all that apply.) (a) Cost-based Deletion (b) Asynchronous Adaptive Refresh (c) Popularity Contest

The Content-encoding header is used to declare the MIME type and compression method used in a HTTP response.

The authentication mode origin-ip-redirect allows an administrator to assign a Time To Live (TTL) for the surrogate credentials. Meanwhile the authentication mode origin-cookie-redirect does not provide this feature.