Blue Coat Blue Coat Systems BCCPP Questions & Answers

• Question 201:

  Which method of controlling downloads of certain file types works fastest on ProxySG?

  A. Apparent Data Type

  B. MIME Type

  C. File extension

  Correct Answer: C

• Question 202:

  You can NOT use a self-signed certificate when intercepting SSL traffic.

  A. True

  B. False

  Correct Answer: B

• Question 203:

  What criterion is NOT used to determine location awareness of a ProxyClient

  A. IP address range

  B. Virtual NICs IP address range

  C. The IP address of the closest AND concentrator

  D. DNS server IP address

  Correct Answer: C

• Question 204:

  Which of the following statements are true about dynamic bypass list? (Choose all that apply)

  (a)

  Configured polices will not be enforced on client request if the request matches an entry in the bypass list.

  (b)

  Dynamic bypass entries are lost when ProxySG is restarted

  (c)

  If request made to a site in a forwarding policy is in the bypass list, the site is inaccessible

  (d)

  Dynamic bypass parameters can be configured on Management Console and CLI.

  A.

  All of the above

  B.

  a, b and c only

  C.

  b, c and d only

  D.

  a, c and d only

  Correct Answer: B

• Question 205:

  url.regex=!\.html$ d\ DENY

  What is the effect of the above CPL code?

  A. Deny any URL that ends with html

  B. Deny any URL that does not end with html

  C. Deny any URL that ends with htm or html

  D. Deny any URL that does not end with htm or html

  Correct Answer: B

• Question 206:

  Which of the following statements are true about ProxySG Protocol Detection feature? (Choose all that apply)

  (a)

  Protocol detection is performed on the server's response.

  (b)

  Protocol detection is performed on the client's request.

  (c)

  Enabling Detect Protocol option will automatically enable early intercept attribute in proxy services.

  (d)

  Protocol detection is performed by looking at the TCP port number.

  A.

  a and b only

  B.

  b and c only

  C.

  c and d only

  D.

  ALL of the above

  Correct Answer: D

• Question 207:

  The ProxySG acts as both an ICAP client and ICAP server.

  A. True

  B. False

  Correct Answer: A

• Question 208:

  Which of the following statements are true about Reverse Proxy deployment?(Choose all that apply)

  (a)

  Forwarding hosts in the forwarding file must be defined as "server" style

  (b)

  Default-scheme in forwarding file is supported

  (c)

  Protocol conversion between HTTPS <- ->HTTP are automatic

  (d)

  ProxySG should be set with default DENY policy

  A.

  a, b and c only

  B.

  a, c and d only

  C.

  b, c and d only

  D.

  All of the above

  Correct Answer: B

• Question 209:

  Which of the following statements are true? (Choose all that apply)

  (a)

  The SGOS object store utilizes a directory structure so that objects in cache can be accessed rapidly

  (b)

  Information about a single object in cache be retrieved from the Management console or the CLI

  (c)

  There are two object caches, the object cache which resides on disk and the object cache which resides in RAM

  (d)

  The SGOS object store is separated by protocol (HTTP cache, FTP cache, etc.)

  A.

  a, b and c only

  B.

  a, c and d only

  C.

  b, c and d only

  D.

  All of the above

  Correct Answer: A

• Question 210:

  Which of the following steps have to be performed to support Kerberos Authentication? (Choose all that apply)

  (a)

  A virtual URL that resolves to the IP of the ProxySG.

  (b)

  Registering the BCAAA as a Service Principal Name.

  (c)

  Configuring IWA Realm.

  (d)

  Configuring Explicit Proxy.

  A.

  All of the above

  B.

  None of the above

  C.

  a, b and c only

  D.

  b, c and d only

  Correct Answer: D