BCCPP Exam Training Practice Tests (Blue Coat Certified Proxy Professional, V.3.5.1)]

Question 1

Name two ways by which the ProxySG can determine that a DDOS attack is in progress. (Select 2)

A. Sustained bandwidth utilization at or near 100%. B. The ProxySG becomes unable to communicate with its configured DNS server(s). C. Excessive number of requests from a specific server. D. Excessive number of HTTP connections from a specific client.

Correct Answer: C

Question 2

The Content-encoding header is used to declare the MIME type and compression method used in a HTTP response.

A. True B. False

Correct Answer: A

Question 3

If multiple users from different IP addresses have been authenticated as guest users into the same authentication realm, how can you distinguish among them in the Management Console display of currently logged-in users?

A. You cannot do this. B. The ProxySG automatically appends a sequential number to each successive guest login from a different IP address. C. When creating policy to authenticate guest users, use variable substitutions such as IP addresses to form part of the guest username.

Correct Answer: C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 4

The authentication mode origin-ip-redirect allows an administrator to assign a Time To Live (TTL) for the surrogate credentials. Meanwhile the authentication mode origin-cookie-redirect does not provide this feature.

A. True B. False

Correct Answer: B

Question 5

http://support.bluecoat.com/products/proxysg/sg9000.html?customer=123
For the above URL, will the trigger url.domain=bluecoat.com match or miss?

A. Miss B. Match

Correct Answer: A

Question 6

Health checks are automatically created under which scenarios? (Choose all that apply)
(a)
When a forwarding host is created.
(b)
When a failover group is created.
(c)
When the DRTR is enabled.
(d)
When a SOCKS gateway is created.

A. b, c & d only B. All of the above C. a, b & c only D. a, c & d only

Correct Answer: D

Question 7

Without asking a user or physically inspecting their computer, how can you determine which
version of web browser they are using to make requests that are intercepted by the ProxySG? (Select all that apply)

A. By using the VPM realm browser. B. You cannot do this. C. By inspecting the ProxySG access log, if access logging is enabled. D. By performing packet captures on the ProxySG when that web browser is in use.

Correct Answer: C,D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 8

By default, what type of authentication challenge will the user-agent receive if the authentication node is set to AUTO?

A. proxy-ip for explicit and transparent clients B. proxy for explicit and transparent clients C. proxy for explicit and proxy-ip for transparent D. proxy for explicit and origin-cookie-redirect for transparent clients E. proxy-ip for explicit and origin-ip-redirect for transparent clients

Correct Answer: C

Question 9

Which of the following cashing techniques utilize retrieval workers to keep the contents of the cache fresh? (Choose all that apply.)
(a)
Cost-based Deletion
(b)
Asynchronous Adaptive Refresh
(c)
Popularity Contest

A. a & b only B. b & c only C. All of the above D. b only

Correct Answer: D

Question 10

Which Blue Coat product is best suited for simultaneously administering a large number of ProxySG appliances?

A. Director B. ProxyAV C. PacketShaper D. Reporter

Correct Answer: A

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 11

Which of the following statements are true about Reverse Proxy deployment?(Choose all that apply)
(a)
Forwarding hosts in the forwarding file must be defined as "server" style
(b)
Default-scheme in forwarding file is supported
(c)
Protocol conversion between HTTPS <- ->HTTP are automatic
(d)
ProxySG should be set with default DENY policy

A. b, c & d only B. All of the above C. a, b & c only D. a, c & d only

Correct Answer: D

Question 12

A <cache>policy layer in CPL can best be implemented in which type of VPM layer?

A. This function cannot be performed in the VPM. B. Web Content C. Web Authentication D. Cache

Correct Answer: B

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 13

Who plays the role of the trusted third party, when client and server communicate via Kerberos?

A. NTLM (NT LAN Manager) B. SSL Certificate Authority C. PKI (Public Key Infrastructure) D. KDC (Key Distribution Center)

Correct Answer: D

Question 14

When performing anti-virus scanning using Blue Coat appliances, how does the ProxySG determine what specific actions to perform for high-performance or maximum-security deployments?

A. In the Configuration > Threat Protection settings of the Management Console. B. By querying the configuration of the anti-virus scanning appliance. C. By reading the Threat Protection policy file.

Correct Answer: A

Blue Coat Certified Proxy Professional, V.3.5.1 - BCCPP Exam Practice Test