Question 1

Which of the following are true when enabling the early intercept attribute for a proxy service? (Choose all that apply) (a) It is automatically enabled when the detect protocol attribute is enabled. (b) The ProxySG completes the three-way TCP handshake with the client before establishing a connection to the upstream server. (c) It can be used with any protocol.

Accepted Answer

A)  a & c only 
B)  a & b only 
C)  c only 
D)  All of the above

Question 2

Hostname of the BCAAA= serverl DNS suffix =bluecoat.com Hostname of the Bluecoat SG = sgo1 Referring to the above information, what is the correct syntax for the SPN command in the Domain Controller?

Accepted Answer

A)  setspn-A HTTP/serverl.bluecoat.com sg01 
B)  setspn-L HTTP/serverl.bluecoat.com sg01 
C)  setspn-A HTTP/sg01.bluecoat.com server1 
D)  setspn-D HTTP/serverl.bluecoat.com sg01

Question 3

When creating a TCP tunnel service in explicit mode, you must also configure a forwarding host?

Accepted Answer

A) True 
 B)False

Question 4

Which of the following options are configured when implementing failover on ProxySG appliances? (Choose all that apply) (a) Multicast address for advertisements (b) Relative Priority (c) Virtual MAC address (d) Group Secret to hash information sent in multicast announcements

Accepted Answer

A)  All of the above 
B)  a, b & c only 
C)  a, b & d only 
D)  b, c & d only

Question 5

When authenticating a guest user in an LDAP realm, which of these CPL properties would best be used to specify that the guest user should be part of the pre-defined LDAP group MobileUsers?

Accepted Answer

A)  authorize.guest(group=MobileUsers) 
B)  authorize.add_group(MobileUsers) 
C)  authorize.guest(MobileUsers) 
D)  authorize.add_group(guest:MobileUsers)

Question 6

A policy trace can be enabled for any layer type.

Accepted Answer

A) True 
 B)False

Question 7

Health checks are automatically created under which scenarios? (Choose all that apply) (a) When a forwarding host is created. (b) When a failover group is created. (c) When the DRTR is enabled. (d) When a SOCKS gateway is created.

Accepted Answer

A)  a, b & c only 
B)  a, c & d only 
C)  b, c & d only 
D)  All of the above

Question 8

Which of the following statements are true? (Choose all that apply) (a) The SGOS object store utilizes a directory structure so that objects in cache can be accessed rapidly (b) Information about a single object in cache be retrieved from the Management console or the CLI (c) There are two object caches, the object cache which resides on disk and the object cache which resides in RAM (d) The SGOS object store is separated by protocol (HTTP cache, FTP cache, etc.)

Accepted Answer

A)  a, b & c only 
B)  a, c & d only 
C)  b, c & d only 
D)  All of the above

Question 9

http://www.bluecoat.com/index.html?user=bobkent   For the above URL, will the trigger url.regex=!\.html$ match or miss?

Accepted Answer

A)  Match 
B)  Miss

Question 10

When implementing failover with ProxySG appliances, configurations and policies on the master are automatically replicated to members of the failover group.

Accepted Answer

A) True 
 B)False

Question 11

In CPL, what is the difference between Deny and Force Deny?

Accepted Answer

A)  Only one Force Deny can appear in any policy layer. 
B)  A later Allow can override a Force Deny. 
C)  Force Deny exists only in the VPM, not in CPL. 
D)  A Force Deny is final and cannot be reversed by subsequent policy processing.

Question 12

Which statement is correct about Proxy-Authenticate header

Accepted Answer

A)  It is sent by the proxy every time when a HTTP 407 status code is sent 
B)  It is used by a browser to pass credentials to a proxy 
C)  It is used by both client and proxy to negotiate the method of credential exchange

Question 13

Which of the following hostnames are NOT matched by the regular expression "www (0 9) (0-9)? \ .foo\ .com")

Accepted Answer

A)  www.foo.com 
B)  www01.foo.com 
C)  www1.foo.com 
D)  www11.foo.com

Question 14

When configuring forwarding in PoxySG, what are the possible load balancing methods? (Choose all that apply) (a) Round Robin (b) Fastest ICMP Reply (c) Least Connections (d) Least Delay

Accepted Answer

A)  a & c only 
B)  b & d only 
C)  a & d only 
D)  b & c only

Question 15

Where can you get the SNMP MIBs for the version of SGOS running on your ProxySG?

Accepted Answer

A)  BlueTouch Online. 
B)  At https://proxyIPaddr:8082/mibs, where proxyIPaddr is the IP address of your ProxySG. 
C)  From the vendor of your network management software. https://kb.bluecoat.com/index?page=content&id=FAQ718&actp=RSS

Question 16

When SGOS processes a client HTTP request, how many server workers are associated with each client worker?

Accepted Answer

A)  Zero or one, depending on whether the request is served from the SGOS object cache. 
B)  One. 
C)  Two. 
D)  The answer varies depending on current ProxySG CPU utilization.

Question 17

A cookie without an expire value will ___

Accepted Answer

A)  last until the client cleats cookies from the browser 
B)  last until the client closes the browser session 
C)  last until the client logs off

Question 18

In a typical client HTTP request, identify the four principal policy checkpoints in the order they are reached.

Accepted Answer

A)  Client in, server out, client out, server in. 
B)  Client in, server in, client out, server out. 
C)  Client in, server out, server in, client out. 
D)  Client in, server in, server out, client out.

Question 19

With ProxySG failover, the failover Virtual IP address can be the same as the IP address assigned to the master.

Accepted Answer

A) True 
 B)False

Question 20

What type of authentication challenge is issued when using the Policy Substitution Realm?

Accepted Answer

A)  407 proxy Authentication Required 
B)  401 Unauthorized 
C)  No challenge will be issued 
D)  Not enough information to determine the answer

Exam 2: Blue Coat Certified ProxySG Professional

Hostname of the BCAAA= serverl DNS suffix =bluecoat.com Hostname of the Bluecoat SG = sgo1 Referring to the above information, what is the correct syntax for the SPN command in the Domain Controller?

When creating a TCP tunnel service in explicit mode, you must also configure a forwarding host?

Which of the following options are configured when implementing failover on ProxySG appliances? (Choose all that apply) (a) Multicast address for advertisements (b) Relative Priority (c) Virtual MAC address (d) Group Secret to hash information sent in multicast announcements

When authenticating a guest user in an LDAP realm, which of these CPL properties would best be used to specify that the guest user should be part of the pre-defined LDAP group MobileUsers?

A policy trace can be enabled for any layer type.

Health checks are automatically created under which scenarios? (Choose all that apply) (a) When a forwarding host is created. (b) When a failover group is created. (c) When the DRTR is enabled. (d) When a SOCKS gateway is created.

http://www.bluecoat.com/index.html?user=bobkent For the above URL, will the trigger url.regex=!\.html$ match or miss?

When implementing failover with ProxySG appliances, configurations and policies on the master are automatically replicated to members of the failover group.

In CPL, what is the difference between Deny and Force Deny?

Which statement is correct about Proxy-Authenticate header

Which of the following hostnames are NOT matched by the regular expression "www (0 9) (0-9) ? \ .foo\ .com")

When configuring forwarding in PoxySG, what are the possible load balancing methods? (Choose all that apply) (a) Round Robin (b) Fastest ICMP Reply (c) Least Connections (d) Least Delay

Where can you get the SNMP MIBs for the version of SGOS running on your ProxySG?

When SGOS processes a client HTTP request, how many server workers are associated with each client worker?

A cookie without an expire value will ___

In a typical client HTTP request, identify the four principal policy checkpoints in the order they are reached.

With ProxySG failover, the failover Virtual IP address can be the same as the IP address assigned to the master.

What type of authentication challenge is issued when using the Policy Substitution Realm?