BCCPA Exam - Blue Coat Certified Proxy Administrator V3.03

NEW QUESTION 1
What ICAP refers to?

• A. It is a protocol for Web-based AV appliances to communicate with scanning engines of various providers


• B. It is a standard developed by Blue Coat to communicate between ProxySG and other Blue Coat appliances


• C. It is a TCP-based protocol for HTTP request and response modification


• D. It is an approach used by media servers for Digital Rights Management

Answer: A

Explanation:
Reference:www.bluecoat.com/doc/919(second paragraph)

NEW QUESTION 2
If an error occurs during Proxy AV request or response processing, which of the following will occur?

• A. The connection will be allowed


• B. The connection will be denied


• C. The response is determined by the ICAP object properties in policy


• D. The response is determined by the ICAP configuration properties in the management console

Answer: D

Explanation:
Reference:http://www.scribd.com/doc/47672698/SGOS-5-4-Integrating-the-ProxySG-and- ProxyAV-Appliances(page 4-13, step 5)

NEW QUESTION 3
What are the best practices using anti-virus software on aWindows machine running Blue Coat Reporter?

• A. Do not use anti-virus software as the log files cannot contain viruses


• B. Perform scans as you would for any Windows server


• C. Perform scans only during low activity of ProxySG


• D. Perform scans, but bypass certain directories containing frequently changing files

Answer: D

NEW QUESTION 4
If a proxy server is seen in the external Internet as Web server, it is a forward proxy.

• A. True


• B. False

Answer: B

NEW QUESTION 5
You can obtain support information without contacting anyone from Blue Coat support via Blue Coat's online tool, Instant Support.

• A. True


• B. False

Answer: B

Explanation:
Reference:http://forums.bluecoat.com/viewtopic.php?f=13&t=10989

NEW QUESTION 6
ProxySG uses a licensed Blue Coat Web Filter (BCWF), and has configured policies for URL categories. ProxySG uses a DNS server, which for some reason cannot resolve the domain name sp.cwfservice.net anymore. What happens to the content filtering policy evaluation in this case?

• A. Any time when policy evaluation needs to categorize an URL, access to that page is denied.


• B. ProxySG always uses whatever action is configured for the System/unavailable category


• C. Policy evaluation is not affected, because ProxySG uses the default IP address of a WebPulse Service Point


• D. Policy evaluation is not affected for URLs categorized in the BCWF database, and is evaluated as System/unavailable for any other URLS.

Answer: B

NEW QUESTION 7
The ProxySG acts as both an ICAP client and ICAP server.

• A. True


• B. False

Answer: B

Explanation:
Reference:https://docs.google.com/viewer?a=v&q=cache:2ShxIsXpZRYJ:fr.bluecoat.com/d oc/472+The+ProxySG+acts+as+icap+client&hl=en&gl=pk&pid=bl&srcid=ADGEESiaHBmUbYdeiEjps_lGWA_vUAYP1ctDWl0X-BFDCEIJtzrO4RRIFGUkaGoP3azr_pnR3GtKn0jAsyhgYvt4ZSWYi5BLMwYdXo-0hee8- ZqvW_rbULf-bwpNJv9NU7tQx0PWOlet&sig=AHIEtbSvvzaRIKw2Y6ZnmILigR9R- pEAhA(page 2, note)

NEW QUESTION 8
What happens, if ProxyClient is deployed in a place that does not match any conditions in the Location Awareness?

• A. Content filtering is enabled, but acceleration is disabled


• B. Acceleration is enabled, but content filtering is disabled


• C. Default settings for filtering and acceleration are applied


• D. ProxyClient is passive in such case, so neither filtering nor acceleration can work

Answer: C

NEW QUESTION 9
In the VPM, source triggers can be used in conjunction with the ICAP RESPMOD action.

• A. True


• B. False

Answer: A

NEW QUESTION 10
Which attribute is used in authentication in a Microsoft Active Directory LDAP authentication realm?

• A. sAMAccountName


• B. firstname


• C. last name


• D. cn

Answer: D

NEW QUESTION 11
Which of the following policies CANNOT be implemented on the ProxyAV? (Choose all that apply)
(a) Blocking viruses, worms, spyware and trojans
(b) Blocking file types using apparent data type (file signature)
(c) Blocking files that exceed a size limit set by the administrator
(d) Blocking password protected archive files

• A. a only


• B. b only


• C. c only


• D. d only


• E. All of the above can be implemented with the Proxy AV

Answer: E

NEW QUESTION 12
How can you prevent passwords from being sent in plaintext between the ProxySG and an LDAP server?

• A. By enabling SSL communication between the ProxySG and the authentication server.


• B. By disabling anonymous search in this LDAP realm.


• C. By changing the TCP port number for the LDAP primary server host from 389 to 443.


• D. You cannot do this.

Answer: A

NEW QUESTION 13
Some models of the ProxySG have a user limit. The user limit is based on which one of these factors?

• A. The number of unique client IP addresses with open inbound TCP connections to the ProxySG.


• B. The specific license that has been purchased for and installed on that ProxySG.


• C. The number of concurrent open TCP connections to the ProxySG.

Answer: A

NEW QUESTION 14
When specifying a search user for an LDAP authentication realm, what administrative permissions are required on the search user account? (Select all that apply)

• A. All read allow.


• B. Inherit.


• C. Owner all allow.


• D. No special permissions are required.

Answer: B

NEW QUESTION 15
Which of the following methods is NOT appropriate for the initial setup for a ProxySG 2010 series?

• A. Serial console Cable


• B. LCD Panel


• C. Web Wizard accessing HTTPS port 8083


• D. Blue Coat Director applying a profile

Answer: B

NEW QUESTION 16
If you set a service attribute on the ProxySG to "Reflect Client IP", what must you make sure is not going to happen in the network?

• A. The service destination IP is set to "transparent" and Action is set to "Intercept".


• B. Force Authentication through policy.


• C. Asymmetric routing directly from client to OCS.

Answer: A

Explanation:
Reference:http://www.bluecoat.com/sites/default/files/product_tech_primers/Transparent_A pplication_Delivery_Networks.pdf(page 1, last paragraph)

NEW QUESTION 17
Notify user objects utilize cookies and http redirection to deliver error messages to clients.

• A. True


• B. False

Answer: B

NEW QUESTION 18
In a TCP connection, what will a listener service attempt to match before deciding to intercept or to bypass the connection? (Choose all that apply)
(a) Source IP
(b) Destination IP
(c) Destination Port
(d) Source Port

• A. a & b only


• B. b & c only


• C. c & d only


• D. All of the above

Answer: D

NEW QUESTION 19
Which is NOT a good reason to configure user authentication when deploying ProxySG as an Internet gateway proxy?

• A. To allow creation of granular polices by user or group


• B. To allow more detailed logging and reports


• C. To enable more convincing coaching pages for AUP violations


• D. To ensure that cache content is not expired


• E. To protect against unauthorized access of Web objects found in cache

Answer: D

NEW QUESTION 20
If the ProxySG is not receiving any power, how does the Management Console indicate this?

• A. By displaying a health status of Critical.


• B. The Management Console will not load.


• C. By displaying a red power icon at Maintenance > System and Disks > Environment.

Answer: B

NEW QUESTION 21
An administrator created a PIN for the ProxySG front panel, disabled the built-in administrative account and introduced policy-based admin authoritarian, and secured die serial port. After this was done, all the PINs, passwords and policy settings were lost. What options are available to regain access to the appliance? (Choose all that apply)
(a) Return ProxySG appliance to Blue Coat to restore a default SGCS image
(b) Restore the factory settings by pressing and holding a reset button for 5 seconds, configure the appliance anew or restore its configuration from a backup
(c) Try out all 10000 combinations of PIN for the front panel until you find the right one
(d) Remove the hard disk from the ProxySG, connect it as an external SAT A disk to any Windows or Linux computer; clear the admin entry in the /etc/ pssswd file on that disk. Put
thehard disk back in ProxySG, start it up and reset the admin's password.

• A. a only


• B. a & b only


• C. a & c only


• D. a & d only


• E. All of the above

Answer: B

NEW QUESTION 22
Which protocol and port is used by Blue Coat Reporter service to display results?

• A. HTTP port 8987


• B. HTTP port 8443


• C. FTP port 8021


• D. SNMP port 161

Answer: A

Explanation:
Reference:http://forums.bluecoat.com/viewtopic.php?t=3031(post by pmorion)

NEW QUESTION 23
What is true immediately after the initial setup of ProxySG?

• A. None of the content filtering databases is set up


• B. Only the default Blue Coat WebFilter database is set up and available


• C. Blue Coat WebFilter database and 3rd party databases are set up and available

Answer: A

NEW QUESTION 24
What ProxySG appliance has these default settings?
(a) Default policy is ALLOW
(b) Trust client destination IP is ON
(c) Tolerate HTTP errors is ON;

• A. Proxy Edition


• B. Reverse Proxy Edition


• C. MACH5 Edition


• D. Trial Edition

Answer: C

NEW QUESTION 25
When accessing default administrative account with the ProxySG Management Console, which one of these passwords is used?

• A. Console password


• B. Enable password


• C. Setup Console password


• D. Front panel PIN code

Answer: B

NEW QUESTION 26
ProxySG can provide all these services to IM clients — client authentication at a proxy, message reflection, policy enforcement and logging.

• A. True


• B. False

Answer: A

NEW QUESTION 27
......