Blue Coat Blue Coat Systems BCCPP Questions & Answers

• Question 31:

  When a ProxySG is configured to use authentication mode auto with Kerberos credentials and a transparent proxy connection, which actual mode is typically used?

  A. Origin cookie

  B. Origin IP redirect

  C. Origin cookie redirect

  D. Origin IP

  E. None of the above

  Correct Answer: C

• Question 32:

  In CPL, which of the following are possible results of a policy processing transaction? (Select all that ap- ply)

  A. No match.

  B. One or more rules match, changing property value(s).

  C. One or more actions are invoked.

  Correct Answer: C

• Question 33:

  Which policy file is processed first?

  A. Central policy file.

  B. Forward policy file.

  C. Local policy file.

  D. Threat protection policy file.

  E. The answer depends on the processing order configured in the Management Console.

  Correct Answer: C

• Question 34:

  On the ProxySG, where can you specify whether a client is permitted to allow an untrusted server certifi- cate? (Select all that apply)

  A. In the VPM.

  B. In CPL.

  C. In the Management Console.

  Correct Answer: C

• Question 35:

  In which types of ProxySG realms does the ProxySG join the Active Directory domain associated with an IWA realm?

  A. IWA Direct

  B. BCAAA

  C. Both IWA Direct and BCAAA

  D. Neither IWA Direct nor BCAAA

  Correct Answer: A

• Question 36:

  Which of these proxy services must be enabled on the ProxySG to allow communication with an SNMP server?

  A. SNMP

  B. External HTTP

  C. FTP

  D. None of the above

  Correct Answer: A

• Question 37:

  If cookie surrogates are used with a user agent that does not support cookies, how does the ProxySG re- spond?

  A. The ProxySG repeatedly tries to authenticate until the user agent gives up, and authentication is not successful.

  B. The ProxySG automatically switches to an IP surrogate and retries the authentication.

  C. The answer depends on whether any other user agents share the same IP address.

  D. This cannot happen; the ProxySG prevents such policy from being installed.

  Correct Answer: B

• Question 38:

  Name two settings that can be configured in a forwarding group to define which hosts in the group receive traffic. (Select all that apply)

  A. Load balancing

  B. Fail open or closed

  C. Host affinity

  D. Redirection

  Correct Answer: AD

• Question 39:

  When performing Kerberos authentication with an explicit proxy connection, the hostname in the proxy configuration of the web browser must be which of the following?

  A. A hostname that DNS-resolves to the IP address of the BCAAA computer.

  B. A hostname that DNS-resolves to the IP address of the ProxySG.

  C. The hostname of the domain controller.

  Correct Answer: A

• Question 40:

  In which two of these cases must you specify a virtual URL to be used in conjunction with Kerberos au- thentication? (Select 2)

  A. Transparent proxy connection

  B. A redirect authentication mode

  C. Explicit proxy connection

  D. A cookie authentication mode

  E. An origin authentication mode

  Correct Answer: DE