Blue Coat Blue Coat Certifications BCCPP Questions & Answers

• Question 121:

  Log format variable s-ip always refers to

  A. IP address of the HTTP request client

  B. IP address of the original content server

  C. IP address of the ProxySG to which client has established a connection

  Correct Answer: C

• Question 122:

  Who plays the role of the trusted third party, when client and server communicate via Kerberos?

  A. NTLM (NT LAN Manager)

  B. KDC (Key Distribution Center)

  C. PKI (Public Key Infrastructure)

  D. SSL Certificate Authority

  Correct Answer: B

• Question 123:

  Which statement is correct about Proxy-Authenticate header

  A. It is sent by the proxy every time when a HTTP 407 status code is sent

  B. It is used by a browser to pass credentials to a proxy

  C. It is used by both client and proxy to negotiate the method of credential exchange

  Correct Answer: A

• Question 124:

  Which of the following methods can the Windows SSO utilize to derive a user name? (Choose all that apply)

  (a)

  Domain Controller Querying

  (b)

  Direct Client Querying

  (c)

  Direct Client Querying, if unsuccessful then Domain Controller Querying (d) Domain Controller Querying, if unsuccessful then Direct Client Querying

  A.

  a and b only

  B.

  a and c only

  C.

  b and c only

  D.

  b and d only

  E.

  All of the above

  Correct Answer: D

• Question 125:

  In explicit proxy, what will happen to a connection that is made when there is no such service running in the ProxySG?

  A. Connection will be intercepted.

  B. Connection will be rejected.

  C. Connection will by be bypassed.

  D. Connection will be forwarded.

  Correct Answer: C

• Question 126:

  In a transparent proxy that is intercepting HTTP, how can an administrator allow instant messaging over HTTP to pass through ProxySG if they do not have IM license on the ProxySG?

  A. By disabling Detect Protocol

  B. By disabling Protocol Handoff in IM

  C. By configuring the proxy services to bypass AOL IM, MSN IM and Yahoo IM services

  D. By disabling early intercept

  Correct Answer: B

• Question 127:

  The bcreportermain_v1 access log format has a configurable ordering of fields, and this custom order is reflected in a log file header.

  A. True

  B. False

  Correct Answer: A

• Question 128:

  When a client receives an HTTP 302 response from a server, the client will form a new request based on the header.

  A. Forward

  B. Cookie

  C. Location

  D. Redirect

  Correct Answer: C

• Question 129:

  Which header cannot be sent together with an HTTP 407 status code from the ProxySG?

  A. Proxy-Authenticate: Basic="MyRealm"

  B. Proxy-Authenticate: NTLM="MyRealm"

  C. Proxy- Authenticate: Kerberos="MyRealm"

  D. proxy-Authenticate: Negotiate="MyRealm"

  E. All the above headers can be sent with 407 status code

  Correct Answer: D

• Question 130:

  When configuring reverse proxy with SSL, what are the 3 possible options of ensuring host affinity? (Choose all that apply)

  (a)

  client-ip

  (b)

  ssl-session-id

  (c)

  accelerator-cookie

  (d)

  server-ip

  A.

  All of the above

  B.

  b, c and d only

  C.

  a, c and d only

  D.

  a, b and c only

  Correct Answer: B