Blue Coat Blue Coat Certifications BCCPA Questions & Answers

• Question 111:

  What do you need to enable NTLM authentication?

  A. Active directory server and authentication license

  B. BCAAA and authentication license

  C. BCAAA

  Correct Answer: C

• Question 112:

  By looking at the above HTTP GET request, what are the possible proxySG deployment methods that could be in used? (Choose all that apply)

  (a)

  Default Route

  (b)

  WCCP

  (c)

  PAC

  (d)

  WPAD

  A.

  a, d only

  B.

  c, d only

  C.

  b, c only

  D.

  None of the above

  Correct Answer: B

• Question 113:

  What configuration of ProxySG can be created during web initial setup wizard? (Choose all that apply)

  (a)

  IP address or addresses, mask, gateway, DNS address or addresses (b) and settings and manager and backup manager

  (c)

  password for web management Console and CLI enabled mode.

  A.

  A, B only

  B.

  A, C only

  C.

  B, C only

  D.

  All of the above

  Correct Answer: B

• Question 114:

  Which of the following categorization method incur additional costs (not covered by ProxySG and BCWF licenses)?

  A. Local Database Categorization

  B. IWF Categorization

  C. SurfControl Categorization

  D. DRTR Categorization

  Correct Answer: D

• Question 115:

  How many content filtering databases can be used in a policy for SGOS 5.3 at the same time (apart from the local database and IWF restricted categories)?

  A. Only one content filtering database

  B. Any two content filtering databases

  C. Two content filtering databases -- BCWF and one other

  D. Any number of content filtering databases from the list supported by ProxySG

  Correct Answer: D

• Question 116:

  Which is NOT a good reason to configure user authentication when deploying ProxySG as an Internet gateway proxy?

  A. To allow creation of granular polices by user or group

  B. To allow more detailed logging and reports

  C. To enable more convincing coaching pages for AUP violations

  D. To ensure that cache content is not expired

  E. To protect against unauthorized access of Web objects found in cache

  Correct Answer: D

• Question 117:

  Name two different ways to create a transparent proxy environment.

  A. Using the PAC File or configuring WCCP

  B. Configuring a Layer 4 switch or configuring the appliance in bridging mode

  C. Configuring WCCP or using an automatic configuration script

  Correct Answer: BC

• Question 118:

  In a TCP connection, what will a listener service attempt to match before deciding to intercept or to bypass the connection? (Choose all that apply)

  (a)

  Source IP

  (b)

  Destination IP

  (c)

  Destination Port

  (d)

  Source Port

  A.

  a and b only

  B.

  b and c only

  C.

  c and d only

  D.

  All of the above

  Correct Answer: D

• Question 119:

  ProxySG uses a licensed Blue Coat Web Filter (BCWF), and has configured policies for URL categories. ProxySG uses a DNS server, which for some reason cannot resolve the domain name sp.cwfservice.net anymore. What happens to the content filtering policy evaluation in this case?

  A. Any time when policy evaluation needs to categorize an URL, access to that page is denied.

  B. ProxySG always uses whatever action is configured for the System/unavailable category

  C. Policy evaluation is not affected, because ProxySG uses the default IP address of a WebPulse Service Point

  D. Policy evaluation is not affected for URLs categorized in the BCWF database, and is evaluated as System/unavailable for any other URLS.

  Correct Answer: B

• Question 120:

  Which of the following types of traffic are scanned with ICAP RESPMOD?

  A. HTTP responses

  B. FTP uploads

  C. HTTP PUT data

  D. HTTP POST data

  E. All of the above

  Correct Answer: A