Question 1

Which of the following statements are true? (Choose all that apply) (a) The SGOS object store utilizes a directory structure so that objects in cache can be accessed rapidly (b) Information about a single object in cache be retrieved from the Management console or the CLI (c) There are two object caches, the object cache which resides on disk and the object cache which resides in RAM (d) The SGOS object store is separated by protocol (HTTP cache, FTP cache, etc.)

Accepted Answer

The SGOS object store does utilize a directory structure for rapid access (a), information about a single object can be retrieved from the Management console or CLI (b), and there are indeed two object caches, one on disk and one in RAM (c). However, the SGOS object store is not separated by protocol, making (d) incorrect.

Question 2

What criterion is NOT used to determine location awareness of a ProxyClient

Accepted Answer

The IP address of the closest AND concentrator is not typically used to determine location awareness of a ProxyClient. Location awareness is generally determined by the IP address range, virtual NICs IP address range, and DNS server IP address.

Question 3

Which of the following steps have to be performed to support Kerberos Authentication? (Choose all that apply) (a) A virtual URL that resolves to the IP of the ProxySG. (b) Registering the BCAAA as a Service Principal Name. (c) Configuring IWA Realm. (d) Configuring Explicit Proxy.

Accepted Answer

D

Question 4

Which of the following hostnames are NOT matched by the regular expression "www (0 9) (0-9)? \ .foo\ .com")

Accepted Answer

The regular expression "www (0 9) (0-9)? \ .foo\ .com" matches hostnames that start with "www", followed by a single digit (0-9), optionally followed by another digit (0-9), followed by ".foo.com". Hostname "www.foo.com" does not match this pattern because it does not have a digit after "www".

Question 5

Which of these are the features of a Blue Coat Director? (Choose all that apply) (a) Install and update configurations of a group of ProxySG (b) Distribute and control content of a group of ProxySG (c) Managing SSL VPN configuration (d) Monitoring ProxySG Performance

Accepted Answer

Blue Coat Director can install and update configurations, distribute and control content, and monitor performance of ProxySG devices.

Question 6

url.regex=!\.html$ d\ DENY What is the effect of the above CPL code?

Accepted Answer

The CPL code uses a regular expression to match URLs that do not end with ".html" and denies them. The "!" in the regex indicates negation.

Question 7

Which of the following are obvious advantages of having a ProxySG deployed in a Reverse Proxy environment? (Choose all that apply) (a)The ProxySG has built in DOS protection to guard the actual web server from denial-ofservice attacks (b) Increased performance with caching provides an improved Web Experience (c) Consistent default behavior of cache expiration and validation directives (d) SSL termination on ProxySG allow SSL offloading, therefore eliminating bottleneck on the web server side.

Accepted Answer

The advantages of deploying a ProxySG in a Reverse Proxy environment include DOS protection (a), increased performance with caching (b), and SSL termination for offloading (d). Cache expiration and validation directives (c) are not typically considered an obvious advantage in this context.

Question 8

Which of the following are true when attempting to deny access to file types?

Accepted Answer

The answer of Which of the following are true when...

Question 9

With ProxySG failover, the failover Virtual IP address can be the same as the IP address assigned to the master.

Accepted Answer

In a failover setup, the Virtual IP address must be different from the IP address of the master to ensure proper failover functionality and avoid IP address conflicts.

Question 10

What is the protocol used for Blue Coat Director to communicate with ProxySG?

Accepted Answer

The answer of What is the protocol used for Blue...

Question 11

The Content-encoding header is used to declare the MIME type and compression method used in a HTTP response.

Accepted Answer

The answer of The Content-encoding header is used to declare...

Question 12

Which of the following statements are true about dynamic bypass list? (Choose all that apply) (a) Configured polices will not be enforced on client request if the request matches an entry in the bypass list. (b) Dynamic bypass entries are lost when ProxySG is restarted (c) If request made to a site in a forwarding policy is in the bypass list, the site is inaccessible (d) Dynamic bypass parameters can be configured on Management Console and CLI.

Accepted Answer

The answer of Which of the following statements are true...

Question 13

Which of the following statements are true about ProxySG Protocol Detection feature? (Choose all that apply) (a) Protocol detection is performed on the server's response. (b) Protocol detection is performed on the client's request. (c) Enabling Detect Protocol option will automatically enable early intercept attribute in proxy services. (d) Protocol detection is performed by looking at the TCP port number.

Accepted Answer

Protocol detection is performed on both the server's response and the client's request. Enabling Detect Protocol option will automatically enable early intercept attribute in proxy services. Protocol detection is performed by looking at the TCP port number and the content of the packets.

Question 14

A cookie without an expire value will ___

Accepted Answer

A cookie without an expire value is a session cookie, which lasts until the browser session is closed.

Question 15

Which of the following statements are true about Reverse Proxy deployment? (Choose all that apply) (a) Forwarding hosts in the forwarding file must be defined as "server" style (b) Default-scheme in forwarding file is supported (c) Protocol conversion between HTTPS <- ->HTTP are automatic (d) ProxySG should be set with default DENY policy

Accepted Answer

The answer of Which of the following statements are true...

Question 16

Which method of controlling downloads of certain file types works fastest on ProxySG?

Accepted Answer

The answer of Which method of controlling downloads of certain...

Question 17

You can NOT use a self-signed certificate when intercepting SSL traffic.

Accepted Answer

A self-signed certificate can be used to intercept SSL traffic, but it may not be trusted by clients without manual intervention to accept the certificate.

Question 18

After creating CPL in the local policy file, the policy is imported into the VPM CPL file so that it can be viewed through the Visual Policy Manager.

Accepted Answer

The CPL is imported into the VPM CPL file so that it can be viewed through the Visual Policy Manager.

Question 19

Which client deployment methods support the 407 Proxy Authentication Required response code? (Choose all that apply) (a) Proxy Auto Configuration files (b) WCCP (c) Proxy settings in browser (d) Inline Bridging

Accepted Answer

Proxy Auto Configuration files and Proxy settings in browser both support the 407 Proxy Authentication Required response code as they involve explicit proxy configurations where authentication can be enforced.

Question 20

ProxySG is configured to permit error but guest authentication is not configured. What will happen to a user who initiates a connection to the Internet?

Accepted Answer

The answer of ProxySG is configured to permit error but...

Exam 2: Blue Coat Certified ProxySG Professional