Question 1

The SSL certificate returned by the Management Console upon HTTPS access____.

Accepted Answer

The SSL certificate is generated anew automatically every time ProxySG performs initial setup to ensure secure communication.

Question 2

Management Console of ProxySG (SGOS v. 5.4- or earlier) is based on the following client-side technology:

Accepted Answer

The Management Console of ProxySG (SGOS v. 5.4- or earlier) uses a JVM applet embedded in the Web page for its client-side technology.

Question 3

Which console services are NOT available on the ProxySG?

Accepted Answer

All the mentioned console services (SSH, HTTP, HTTPS, and Serial) are available on the ProxySG.

Question 4

Which HTTP error code corresponds to the ProxySG default exception identifier policy_denied?

Accepted Answer

The HTTP error code 403 corresponds to a "Forbidden" error, which is used when access to a resource is denied, aligning with the policy_denied exception.

Question 5

Which of the following tracks client-server transactions going through the ProxySG?

Accepted Answer

Access logs track client-server transactions going through the ProxySG, providing detailed information about each request and response.

Question 6

Which of the following statements are true? (Choose all that apply) (a) Exceptions and notifications can be configured to use specific HTTP response codes. (b) Exceptions and notify user objects can be created through the VPM. (c) Exceptions and notify user objects can be utilized as action objects in the VPM. (d) Exceptions and notify user objects can include substitutions such as the IP address, username or category.

Accepted Answer

Exceptions and notify user objects can be configured to use specific HTTP response codes, utilized as action objects in the VPM, and can include substitutions such as the IP address, username, or category.

Question 7

ProxySG has to be deployed inline (in bridging mode) or virtually inline (using WCCP or an L4 switch) in order to block IM traffic.

Accepted Answer

The answer of ProxySG has to be deployed inline (in...

Question 8

The ProxySG operating system is based on________.

Accepted Answer

The answer of The ProxySG operating system is based on________.
...

Question 9

Can server initiate an HTTP transaction?

Accepted Answer

Server can initiate an HTTP transaction for server-push applications like Web-based instant messaging, AJAX, etc.

Question 10

When accessing Management Console from the Web, the built in admin account uses the regular password of CLI access (NOT the enable password of admin account)

Accepted Answer

The built-in admin account uses the regular password of CLI access (NOT the enable password of admin account) when accessing Management Console from the Web.

Question 11

The following authentication realms will be used in a sequence realm. Which realm should go first?

Accepted Answer

Local realm should go first because it is the default realm and it is used to authenticate users who are not members of any other realm.

Question 12

Which of the following policies CANNOT be implemented on the ProxyAV? (Choose all that apply) (a) Blocking viruses, worms, spyware and trojans (b) Blocking file types using apparent data type (file signature) (c) Blocking files that exceed a size limit set by the administrator (d) Blocking password protected archive files

Accepted Answer

ProxyAV is capable of implementing all the listed policies, including blocking viruses, worms, spyware, trojans, file types by apparent data type, files exceeding a size limit, and password-protected archive files.

Question 13

What happens, if there are multiple listeners to the same TCP port, and destination IP address belongs to multiple IP address ranges?

Accepted Answer

The answer of What happens, if there are multiple listeners...

Question 14

The ProxySG ICAP implementation is fully compatible with which of the following applications? (Choose all that apply) (a) Finjan SurfinGate (b) Webwasher (c) Antivirus Scan Engine (SAVSE) (d) Trend Micro InterScan

Accepted Answer

The ProxySG ICAP implementation is fully compatible with all the listed applications: Finjan SurfinGate, Webwasher, Antivirus Scan Engine (SAVSE), and Trend Micro InterScan.

Question 15

Which layer can be used to block a particular URL?

Accepted Answer

The Web Access layer is responsible for controlling access to web resources, including blocking specific URLs.

Question 16

The ProxySG can create configurable access logs for FTP, HTTP, and Telnet but not for Peer-to-Peer or Real Media

Accepted Answer

The ProxySG can create configurable access logs for various protocols, including Peer-to-Peer and Real Media, not just FTP, HTTP, and Telnet.

Question 17

If you set a service attribute on the ProxySG to "Reflect Client IP", what must you make sure is not going to happen in the network?

Accepted Answer

The service destination IP cannot be set to "transparent" and Action cannot be set to "Intercept" when the service attribute is set to "Reflect Client IP". This is because the "Reflect Client IP" attribute causes the ProxySG to forward the client's IP address to the destination server, and the "transparent" destination IP and "Intercept" action would prevent this from happening.

Question 18

All of the following are software based Blue Coat solutions: Blue Coat Reporter, Blue Coat WebFilter, Blue Coat K9, ProxyClient

Accepted Answer

Blue Coat Reporter, Blue Coat WebFilter, Blue Coat K9, and ProxyClient are all software solutions developed by Blue Coat Systems for web security and management.

Question 19

Which appliance does not need any licensing and is fully operable after deployment?

Accepted Answer

Blue Coat Director is a management appliance that does not require licensing to be fully operable after deployment.

Question 20

ProxySG can provide all these services to IM clients - client authentication at a proxy, message reflection, policy enforcement and logging.

Accepted Answer

ProxySG is capable of providing services such as client authentication, message reflection, policy enforcement, and logging for IM clients, as it is designed to manage and secure web traffic.

Exam 1: Blue Coat Certified ProxySG Administrator