Summer Sale - Special Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: dpt65

BCCPA Questions and Answers

Note! Following BCCPA Exam is Retired now. Please select the alternative replacement for your Exam Certification.

BCCPA Questions and Answers

Question # 6

A policy configured in VPM contains several Web Access layers, each contains several rules. Where a policy rule should be placed to ensure that it is always invoked and its action (e.g. ALLOW or DENY) is not overridden by any other rule?

A.

First in the first layer

B.

First in the last layer

C.

Last in the first layer

D.

Last in the last layer

Full Access
Question # 7

Can ProxySG services configure multiple listeners on the same TCP port?

A.

Yes, the service listeners are scanned top down as displayed under Configuration > Services > Proxy Services , and the first matching listener is always used

B.

No, each TCP port can have up to one listener, which is set to either Bypass or Intercept .

C.

Yes, the listener with the most specific (longest) network mask is chosen, if there are several listeners configured on the same port

D.

Yes, configuring multiple listeners is used to do internal load balancing; they help to distribute incoming TCP connections between multiple listener threads

Full Access
Question # 8

Notify user objects utilize cookies and http redirection to deliver error messages to clients.

A.

True

B.

False

Full Access
Question # 9

What is the behavior of content filtering policies, when the Blue Coat WebFilter license expires?

A.

All content is blocked

B.

All content is allowed

C.

Content is allowed or blocked depending on policy for System/unlicensed

D.

Content is allowed or blocked depending on fail open or fail closed setting in Management Console.

Full Access
Question # 10

Which HTTP error code corresponds to the ProxySG default exception identifier authentication failed?

A.

403

B.

404

C.

503

D.

401

Full Access
Question # 11

From where does the exception exception.user-defined.allinherit its properties?

A.

The exception.user-defined definition.

B.

The default exception configuration in the Management Console.

C.

The exception.all definition.

Full Access
Question # 12

By default, HTTP traffic that is logged is recorded to which log facility?

A.

http

B.

main

C.

bcreportermain_v1

D.

elff

Full Access
Question # 13

Blue coat Director functions include the following (Choose all that apply)

(a) Provide centralized initial setup and policy management

(b) Configure secure gateway and WAN acceleration

(c) Monitor hardware and software metrics and events on ProxySG appliances

(d) Enable proxying and filtering of multicast UDP traffic

A.

a, b & c only

B.

a, b & d only

C.

a, c & d only

D.

b,c & d only

Full Access
Question # 14

The ProxySG gives you the ability to write policies through.

A.

the graphical visual Policy Manager and/or the command-line interface

B.

Visual Policy Manager only

C.

the graphical visual Policy Manager, the command-line interface and/or imported text file

Full Access
Question # 15

The Connect HTTP method is reserved for use with a proxy that can dynamically switch to being a tunnel (e.g. SSL tunneling)

A.

True

B.

False

Full Access
Question # 16

Which protocol and port is used by Blue Coat Reporter service to display results?

A.

HTTP port 8987

B.

HTTP port 8443

C.

FTP port 8021

D.

SNMP port 161

Full Access
Question # 17

If a proxy server is seen in the external Internet as Web server, it is a forward proxy.

A.

True

B.

False

Full Access
Question # 18

Management Console of ProxySG (SGOS v. 5.4- or earlier) is based on the following client-side technology:

A.

FIPS mode improves browser support

B.

Java servlet application

C.

JVM applet embedded in the Web page

D.

Adobe Flex

E.

AJAX and JavaScript

Full Access
Question # 19

When accessing Management Console from the Web, the built in admin account uses the regular password of CLI access (NOT the enable password of admin account)

A.

True

B.

False

Full Access
Question # 20

To implement ProxySG as a default gateway, which of the following options has to be enabled?

A.

Early intercept

B.

Reflect Client IP

C.

IP Forwarding

D.

Detect Protocol

Full Access
Question # 21

Which layer can be used to block a particular URL?

A.

Authentication

B.

Web Access

C.

Forwarding

D.

Web Content

Full Access
Question # 22

If an error occurs during Proxy AV request or response processing, which of the following will occur?

A.

The connection will be allowed

B.

The connection will be denied

C.

The response is determined by the ICAP object properties in policy

D.

The response is determined by the ICAP configuration properties in the management console

Full Access
Question # 23

Proxy servers and firewalls are network security devices that________

A.

can be used interchangeably.

B.

complement each other.

C.

are capable of controlling Layer 2 to Layer 7 traffic.

D.

can spoof client IP addresses.

Full Access
Question # 24

Which function is NOT a characteristic feature of proxy servers?

A.

Making requests in the Internet, using HTTP, FTP, SOCKS on behalf of other clients

B.

IP Masquerading - replacing original requestor's address with it's own

C.

Encapsulating one protocol into another protocol

D.

Caching previously requested resources

Full Access
Question # 25

Which of the following authentication realms are supported in SGOS version 6.2?

(Select all that apply)

A.

RADIUS

B.

LDAP

C.

TACACS+

D.

IWA

Full Access
Question # 26

Can a ProxySG automatically get its own IPv4 address during initial configuration?

A.

Yes

B.

No

Full Access
Question # 27

How can a user restore ProxySG back to its default, factory settings, so that its IP address etc. needs to be configured anew? (Choose all that apply)

(a) Press a button on ProxySG back panel (left arrow on front panel for some models) and hold it for about 5 seconds

(b) Enter a CLI command ( restore-defaults factory-defaults ) and confirm it with y(yes) .

(c) Press a button in Management Console that drops the network configuration, and confirm the warning dialog.

A.

a & b only

B.

a & c only

C.

b & c only

D.

All of the above

Full Access
Question # 28

For ProxyClient content filtering to work, the client’s computer should be able to do a correct lookup of DNS addresssp.cwfservice.net.

A.

True

B.

False

Full Access
Question # 29

In an explicit ProxySG deployment, the TCP packet sent from the client to the ProxySG contains what value as the destination IP address?

A.

The IP address of the ProxySG or a load balancer.

B.

The IP address of the client.

C.

The IP address of the origin content server.

D.

The answer depends on whether client IP address reflection is enabled on this ProxySG.

Full Access
Question # 30

Which appliance does not need any licensing and is fully operable after deployment?

A.

ProxyAV

B.

ProxySG

C.

ProxyRA

D.

Blue Coat Director

Full Access
Question # 31

Which of the following types of traffic are not scanned with ICAP REQMOD?

A.

HTTP PUT data

B.

FTP uploads

C.

FTP responses

D.

HTTP POST data

Full Access
Question # 32

Which HTTP error code corresponds to the ProxySG default exception identifier icap_error?

A.

403

B.

404

C.

503

D.

401

Full Access
Question # 33

What are 'unmanaged endpoints" which make the ProxyRA appliance useful?

A.

TCP connection sources of destinations, which are outside our LAN

B.

Workstations, which need to be in a virtual private network, but VPN clients cannot be installed on them

C.

TCP and UDP ports that are unprotected by the enterprise firewall.

D.

Hosts without ProxyClient installed on them.

Full Access
Question # 34

HTTP/1.1 supports pipelining - multiple related requests are written to a single TCP socket without waiting for the responses to come back — i.e. the requests are done asynchronously in-parallel, instead of doing them sequentially as usual (see picture). Some Web clients such as Opera and Firefox with FasterFox plugin use HTTP pipelining. Assume that ProxySG Is deployed as a forward proxy listening on port 8080.

A.

If an HTTP client tries to use pipelining, the use of proxy will break the HTTP protocol.

B.

For those HTTP clients that use pipelining, the use of forward proxy would ensure faster response time compared to the clients that do not use pipelining.

Full Access
Question # 35

Which is NOT a support- related site for Blue Coat products?

A.

http://forums.bluecoot.com

B.

http://services.bluecoat.com

C.

http://download.bluecoat.com

D.

http://webpulse.bluecoat.com

Full Access
Question # 36

After the initial boot-up. Blue Coat SGOS will automatically boot into a trial license. What is the duration of that period?

A.

30 days - trial can be prolonged by CLI command reset-trial

B.

60 days-trial can be prolonged by CU command reset-trial

C.

90 days

D.

120 days

Full Access