Blue Coat Blue Coat Systems BCCPP Questions & Answers

• Question 21:

  Which one of these statements is NOT true about the ProxySG object cache?

  A. It is stored as a hash table, not a traditional filesystem.

  B. The first chunk of any object can be retrieved in a single disk-read operation.

  C. Objects with similar URLs are usually located next to each other so that accessing related objects in a sequence is faster.

  D. Performance does not deteriorate when the cache is 100% full.

  Correct Answer: D

• Question 22:

  A Web Authentication layer in the VPM can be best implemented in which type of policy layer in CPL?

  A.

  B.

  C.

  Correct Answer: C

• Question 23:

  What happens when a disk is removed from a ProxySG while it is running?

  A. Subsequent requests to objects that were cached on the removed disk will fail.

  B. The objects on the removed disk are automatically remapped to the remaining disks and are imme- diately refetched from the appropriate content servers.

  C. The objects on the removed disk are automatically remapped to the remaining disks and are refetched from the appropriate content servers the next time they are requested.

  D. All subsequent transactions to that ProxySG either fail open or fail closed, depending on configura- tion, until the disk is replaced.

  Correct Answer: A

• Question 24:

  Which of these aspects of ProxySG behavior cannot be controlled by CPL? (Select all that apply)

  A. Initiate a packet capture.

  B. Initiate a health check.

  C. Cache content.

  D. Perform user authentication.

  E. Perform access logging.

  F. Control client access to web resources.

  Correct Answer: DEF

• Question 25:

  What information is stored in a policy trace for a transaction processed by a proxy service that is set to By- pass? (Select all that apply)

  A. Client IP address.

  B. Destination IP address.

  C. Proxy service name.

  D. All policy statements that are evaluated and match.

  E. All policy statements that are evaluated and miss.

  F. None of the above; no entry is recorded in the policy trace.

  Correct Answer: ABC

• Question 26:

  Name two ways by which the ProxySG can determine that a DDOS attack is in progress. (Select 2)

  A. Excessive number of requests from a specific server.

  B. Excessive number of HTTP connections from a specific client.

  C. The ProxySG becomes unable to communicate with its configured DNS server(s).

  D. Sustained bandwidth utilization at or near 100%.

  Correct Answer: A

• Question 27:

  How must you configure the RTMP proxy service to process Flash traffic originating at youtube.com?

  A. Enable HTTP handoff on the Flash proxy on the ProxySG.

  B. Enable Detect Protocol on the External HTTP proxy service.

  C. Write policy in the VPM or CPL to direct traffic from youtube.com to the RTMP proxy service.

  D. You cannot do this.

  Correct Answer: A

• Question 28:

  Where do you most appropriately configure the ProxySG to decide whether to authenticate guest users?

  A. In the CLI.

  B. In the Management Console.

  C. In policy.

  Correct Answer: C

• Question 29:

  NTLM credentials or Kerberos credentials: Which credentials typically require more trips between the ProxySG and the domain controller?

  A. NTLM credentials

  B. Kerberos credentials

  Correct Answer: A

• Question 30:

  By default, how often is the standard SSL trust package updated?

  A. Once every hour.

  B. Once every day.

  C. Once every seven days.

  D. Once every 30 days.

  Correct Answer: C