Blue-Coat BCCPA Testing Engine 2021

NEW QUESTION 1
If the VPM displays two Web Access layers, which one is evaluated first?

• A. The one that is visually to the left.
• B. The one that is visually to the right.
• C. The answer depends on the contents of each layer.

Answer: C

NEW QUESTION 2
Which are the two packets that are used in WCCP discovery process? (Choose all that apply)
(a) HERE_I_AM
(b) HOME_ROUTER_IP:
(c) I_SEE_YOU
(d) WEB_CACHE_HERE

• A. All of the above
• B. a, b & c only
• C. b & d only
• D. a & c only

Answer: D

NEW QUESTION 3
Consider an inline deployment — see figure.
Assume that a browser on Client0l is configured to use SG01 as an explicit proxy on port 8080.
The only service on SG01 set to Intercept is the HTTP service on port 8080 for the
<Transparent> destination address. Default policy is ALLOW and there is no custom policy. What will the user see in the browser window after requesting a Web page?

• A. A message "Proxy Server Refused Connection" or similar (depending on the browser being used).
• B. "Access denied" message due to policy DENY
• C. Nothing, there will be a timeout error
• D. The requested Web page will be served to the browser

Answer: D

NEW QUESTION 4
From the viewpoint of the ProxySG, a user login consists of which three components? (Select 3)

• A. IP address
• B. Password
• C. Authentication realm
• D. Username
• E. User agent

Answer: ACE

NEW QUESTION 5
What client-side technology does the Management Console use?

• A. Java applets
• B. HTML5
• C. Ajax
• D. Flash

Answer: A

NEW QUESTION 6
Various models of ProxySG (e.g. 810-5 and 810-10) have different user limits. What is a user limit?

• A. The number of unique IP addresses is not different for the both models, but there is a strictly enforced limit of simultaneous TCP connections that each model supports
• B. User limit is the recommended number of unique IP addresses that can connect to the ProxySG for the given hardwar
• C. ProxySG can be configured to exceed this limit.
• D. It is the number of unique IP addresses that can connect to the ProxySG, and this limit is strictly enforced by the license.

Answer: B

Explanation:
Reference:https://support.bluecoat.com/sgos/ProxySG//Mobile/Advanced/Content/02Tasks
/Traffic_Management/user_overflow_actions.htm

NEW QUESTION 7
What do you need to enable NTLM authentication?

• A. Active directory server and authentication license
• B. BCAAA and authentication license
• C. BCAAA

Answer: C

Explanation:
Reference:https://kb.bluecoat.com/index?page=content&id=KB3117

NEW QUESTION 8
The ProxySG acts as both an ICAP client and ICAP server.

• A. True
• B. False

Answer: B

Explanation:
Reference:https://kb.bluecoat.com/index?page=content&id=KB2899

NEW QUESTION 9
Persistent TCP connections are enabled by default starting with which version of HTTP?

• A. 1.1
• B. 0.9
• C. 1.0
• D. None of the above

Answer: A

Explanation:
Reference:http://stackoverflow.com/questions/246859/http-1-0-vs-1-1(seethe paragraph with grey background)

NEW QUESTION 10
Which statements are true about the Blue Coat WebFilter? (Choose all that apply)
(a) A single web site can belong to multiple categories
(b) Embedded images and objects may be denied, even though the container page is allowed.
(c) WebFilter on-box database can be used in conjunction with a third party content database
(d) WebFilter on-box database updates are Web downloads

• A. a, b & c only
• B. b & d only
• C. a, c & d only
• D. b, c & d only
• E. All of the above

Answer: E

NEW QUESTION 11
When does the ProxySG require the use of BCAAA with an IWA realm?

• A. When using Kerberos credentials.
• B. When your organization does not permit the ProxySG to join the Windows domain of the authentication server.
• C. When you are using two or more IWA realms on the same ProxySG.
• D. When you are performing SSL interception.

Answer: A

Explanation:
Reference:https://bto.bluecoat.com/sgos/ProxySG/63/AuthMobileGuide/Content/Topics/Aut hentication/Tasks/IWA/IWA_BCAAA_st.htm

NEW QUESTION 12
Which group of services does not have a specialized proxy and is handled by TCP Tunnel instead?

• A. HTTP, HTTPS, FTP
• B. SOCKS
• C. LDAP, IMAP, SSH
• D. QuickTime, Real Audio
• E. AOL, MSN IM, Yahoo IM

Answer: E

NEW QUESTION 13
Coaching or splash pages have to be configured through CPL rather than VPM.

• A. True
• B. False

Answer: B

NEW QUESTION 14
When the ProxySG 200's power LED indicator alternates between green and amber, it means that the system is booting.

• A. True
• B. False

Answer: B

Explanation:
Reference:http://download.cacheflow.com/manuals/SGOS4/SG200_Install_4x.pdf(page 10 and33)

NEW QUESTION 15
Which protocol and port is used by Blue Coat Reporter service to display results?

• A. HTTP port 8987
• B. HTTP port 8443
• C. FTP port 8021
• D. SNMP port 161

Answer: A

Explanation:
Reference:http://forums.bluecoat.com/viewtopic.php?t=3031(post by pmorion)

NEW QUESTION 16
Which statement is true about a ProxySG with factory settings:

• A. To get network access, initial setup is necessary — ProxySG does not have an IP address until then
• B. Unconfigured ProxySG responds to some of the pre-built IP addresses, which are contained in the private IP address ranges 10.0.0.0/255.0.0.0 and 172.16.0.0/255.240.0.0 and 192.168.0.0/255.255.0.0 .
• C. Unconfigured ProxySG tries to obtain IP address from a DHCP server
• D. Unconfigured ProxySG sends RARP request to look up its IP address from the MAC address of its network interface car
• E. If it cannot get a valid IP address, initial setup is required.

Answer: A

NEW QUESTION 17
When a proxy service listener matches incoming client traffic and is set to Bypass, what happens to the traffic?

• A. The ProxySG determines whether any other proxy service listeners match the same traffic but are set to Intercept.
• B. The ProxySG returns an exception to the client.
• C. The ProxySG passes the traffic through to the original destination without additional processing.
• D. The ProxySG silently drops the connection.
• E. The answer depends on whether the client is using an explicit or transparent proxy connection.

Answer: C

NEW QUESTION 18
Which of the following Authentication Realms are supported by Blue Coat in SGOS 5.3? (Choose all that apply)
(a) IWA
(b) RADIUS
(C) LDAP
(d) TACACS+

• A. a, b & d only
• B. b, c & d only
• C. a, b &c only
• D. All of the above

Answer: C

NEW QUESTION 19
How can you prevent passwords from being sent in plaintext between the ProxySG and an LDAP server?

• A. By enabling SSL communication between the ProxySG and the authentication server.
• B. By disabling anonymous search in this LDAP realm.
• C. By changing the TCP port number for the LDAP primary server host from 389 to 443.
• D. You cannot do this.

Answer: A

NEW QUESTION 20
It is possible to upgrade the version of ProxyClient installation on a ProxySG without upgrading its SGOS version.

• A. True
• B. False

Answer: A

NEW QUESTION 21
Can you have more than one Web Access layer active in the VPM at any given time?

• A. Yes
• B. No

Answer: B

NEW QUESTION 22
Which types of requests are likely to be served the fastest?

• A. TCP_MISS
• B. TCP_NC_MISS
• C. TCP_HIT
• D. TCP_MEM_HIT
• E. TCP_RESCAN_HIT

Answer: D

Explanation:
Reference:http://www.alainfontaine.lu/blog/2009/01/stellar-wordpress-performance/

NEW QUESTION 23
A single ProxySG appliance can act as a Gateway Proxy and WAN Acceleration Proxy at the same time.

• A. True
• B. False

Answer: A

Explanation:
http://documents.sysob.com/blue_coat/Proxy_Sizing_Guide_SGxx.pdf(forward proxy, second paragraph; example 3, third page)

NEW QUESTION 24
ProxySG uses a licensed Blue Coat Web Filter (BCWF), and has configured policies for URL categories. ProxySG uses a DNS server, which for some reason cannot resolve the domain name sp.cwfservice.net anymore. What happens to the content filtering policy evaluation in this case?

• A. Any time when policy evaluation needs to categorize an URL, access to that page is denied.
• B. ProxySG always uses whatever action is configured for the System/unavailable category
• C. Policy evaluation is not affected, because ProxySG uses the default IP address of a WebPulse Service Point
• D. Policy evaluation is not affected for URLs categorized in the BCWF database, and is evaluated as System/unavailable for any other URLS.

Answer: B

NEW QUESTION 25
The following authentication realms will be used in a sequence realm. Which realm should go first?

• A. Local
• B. IWA
• C. Radius
• D. LDAP

Answer: A

Explanation:
Reference:http://www.bluecoat.com/doc/610

NEW QUESTION 26
What happens to ProxySG logging, when uploading them to a remote FTP server becomes impossible?

• A. When there is no more space for logging, ProxySG switches on dynamic bypass for TCP connections — stops intercepting traffic
• B. When there is no more space for logging, ProxySG will process policy, but will ignore any logging-relatedpolicies or configuration settings
• C. ProxySG erases old logs but continues writing the more recent ones
• D. Either logging stops or older log files are erased — depending on the ProxySG configuration

Answer: C

NEW QUESTION 27
......