Blue Coat Proxy Administrator Questions + Answers

Post by **answerhappygod** » Tue Apr 05, 2022 8:37 am

Question 1 ( Topic 1 )
Which statements are true about the Blue Coat WebFilter? (Choose all that apply)
(a) A single web site can belong to multiple categories
(b) Embedded images and objects may be denied, even though the container page is allowed.
(c) WebFilter on-box database can be used in conjunction with a third party content database
(d) WebFilter on-box database updates are Web downloads
A. a, b & c only
B. A. b & d only
C. a, c & d only
D. b, c & d only
E. All of the above

Answer : E

Question 2 ( Topic 1 )
Which of the following tracks client-server transactions going through the ProxySG?
A. Event logs
B. Sys logs
C. Report logs
D. Access logs

Answer : D

Question 3 ( Topic 1 )
What acceleration techniques are NOT part of MACHS?
A. Bandwidth management (traffic shaping)
B. Protocol optimization and compression
C. IP layer route optimization
D. Object caching
E. Byte caching

Answer : C

Reference:http://www.edgeblue.com/Mach5.asp
Question 4 ( Topic 1 )
What does the Blue Coat WebFilter do to classify sites not found in the WebFilter on-box database?
A. Sends classification requests to WebPulse
B. Runs Bayes classification algorithm on ProxySG
C. Forwards categorization requests to other ProsySG
D. Matches against a list of forbidden keywords

Answer : A

Question 5 ( Topic 1 )
Which virus-scanning engine is NOT supported by ProxyAV?
A. MCAfee
B. Sophos
C. Norton
D. Kaspersky E.Panda

Answer : C

Reference:http://www.google.com.pk/url?sa=t&rct=j ... fee&source
=web&cd=2&ved=0CCgQFjAB&url=http%3A%2F%2Fwww.bluecoat.com%2Fdoc%2F791& ei=D_7bTpbnH9SWhQeftvH-BA&usg=AFQjCNGAWHxi2NwZ3snr8iq7tpQ4R5wnTA(first paragraph)

Question 6 ( Topic 1 )
When Proxy server settings in a browser are configured using WPAD (web Proxy Auto
Discovery) protocol, what has to be specifically guaranteed to ensure security?
A. JavaScript on client's browser must be enabled, otherwise it will not allow to execute proxy configuration script.
B. Hosts (e.g. wpad.mydepartment.mycompany.com, wpad.mycompany.com) should be trusted not to serve malicious wpad.dat files
C. Internet Explorer browser should receive security updates more often than twice a year
D. DHCP must be accessible at the time, when user starts a browser

Answer : B

Question 7 ( Topic 1 )
What are the types of challenges that can be authenticated by ProxySG? (Choose all that apply)
(a) Administrator attempts to access Management console
(b) user attempts to access the internet
(c) Administrator attempts to access SG via SSH
(d) User attempts to access a CIFS file server
A. All of the above
B. b, c &d only
C. a, c & d only
D. a, b & c only

Answer : D

Reference:https://kb.bluecoat.com/index?page=content&id=KB2877
Explanation: Administrator doesnt need to use authentication by ProxySG to access its ownmanagement console. The authentication used is a username password to access
Management console.
Question 8 ( Topic 1 )
In the VPM, source triggers can be used in conjunction with the ICAP RESPMOD action.
A. True
B. False

Answer : A

Question 9 ( Topic 1 )
If an error occurs during Proxy AV request or response processing, which of the following will occur?
A. The connection will be allowed
B. The connection will be denied
C. The response is determined by the ICAP object properties in policy
D. The response is determined by the ICAP configuration properties in the management console

Answer : D

Reference:
ProxyAV-Appliances(page 4-13, step 5)
Question 10 ( Topic 1 )
Is Management Console accessible over HTTP?
A. Yes, it is enabled by default, except in FIPS mode
B. It can be explicitly enabled, the default port is 8081
C. It can be explicitly enabled, the default port is 8082
D. A new service has to be created with port selected by the administrator

Answer : B

Question 11 ( Topic 1 )
What is in NTLM Type 2 Message?
A. Domain + Workstation Name
B. Challenge for the Client
C. Usemame and Password
D. Client Response for the challenge

Answer : B

Reference:http://davenport.sourceforge.net/ntlm.h ... pe2Message(search type 2 message)
Question 12 ( Topic 1 )
A parent exception can provide the default values for a child exception.
A. True
B. False

Answer : A

Reference:http://download.cacheflow.com/manuals/S ... de_3.1.4.p df(page 391, About the Exceptions hierarchy)
Question 13 ( Topic 1 )
What are the best practices using anti-virus software on aWindows machine running Blue
Coat Reporter?
A. Do not use anti-virus software as the log files cannot contain viruses
B. Perform scans as you would for any Windows server
C. Perform scans only during low activity of ProxySG
D. Perform scans, but bypass certain directories containing frequently changing files

Answer : D

Question 14 ( Topic 1 )
What are 'unmanaged endpoints" which make the ProxyRA appliance useful?
A. TCP connection sources of destinations, which are outside our LAN
B. Workstations, which need to be in a virtual private network, but VPN clients cannot be installed on them
C. TCP and UDP ports that are unprotected by the enterprise firewall.
D. Hosts without ProxyClient installed on them.

Answer : B

Question 15 ( Topic 1 )
Which protocol and port is used by Blue Coat Reporter service to display results?
A. HTTP port 8987
B. HTTP port 8443
C. FTP port 8021
D. SNMP port 161

Answer : A

Reference:http://forums.bluecoat.com/viewtopic.php?t=3031(post by pmorion)

Question 16 ( Topic 1 )
Which of the following tracks client-server requests and server responses?
A. Event logs
B. Sys logs
C. Report logs
D. Access logs

Answer : D

Question 17 ( Topic 1 )
Which of the following policies can be applied to Instant Messaging traffic? (Choose all thatapply)
(a) A policy to deny the transfer of specific file types or file sizes
(b) A policy to deny a specific IM request method
(c) A policy to deny a key word or words using a regular expression
(d) A policy to deny a specific IM buddy or IM chat room
A. a, b & c only
B. b, c & d only
C. a, c & d only
D. All of the above

Answer : A

Reference:http://download.cacheflow.com/manuals/S ... de_3.1.4.p df(page 438, 439, 440, 441)
Question 18 ( Topic 1 )
In SGOS 5.3, what are the two versions that you can opt for? (Choose all that apply)
(a) Proxy Edition
(b) Full Edition
(c)WAN Opt Edition
(d) MACH5 Edition
A. b&c only
B. a, c & d only
C. c & d only
D. a & d only

Answer : D

Question 19 ( Topic 1 )
What are "unmanaged endpoints' which make the Blue Coat RA (Remote Access) appliance useful?
A. TCP connection sources or destinations, which are outside our LAN
B. Workstations, which need to be in a virtual private network, but VPN clients cannot beinstalled on them
C. Mobile user laptops, which are used in places not protected by ProxySG
D. Hosts without installed ProxyClient or with disabled ProxyClient

Answer : B

Reference:http://www.onixnet.com/bluecoat/BlueCoa ... RA_510.htm(second paragraph)
Question 20 ( Topic 1 )
Which of the following console services are enabled by default? (Choose all that apply)
(a) HTTP port 8081
(b) HTTPS port 8082
(c) HTTPS port 8083
(d) SSH port 22
A. a & c only
B. b & d only
C. c & d only
D. a & b only

Answer : B

Reference:http://download.cacheflow.com/manuals/S ... de_3.1.4.p df(page 105)

Question 21 ( Topic 1 )
Which layer can be used to block a particular URL?
A. Authentication
B. Web Access
C. Forwarding
D. Web Content

Answer : B

Question 22 ( Topic 1 )
Which function is NOT a characteristic feature of proxy servers?
A. Making requests in the Internet, using HTTP, FTP, SOCKS on behalf of other clients
B. IP Masquerading - replacing original requestor's address with it's own
C. Encapsulating one protocol into another protocol
D. Caching previously requested resources

Answer : B

Question 23 ( Topic 1 )
Which of the following Authentication Realms are supported by Blue Coat in SGOS 5.3?
(Choose all that apply)
(a) IWA
(b) RADIUS
(C) LDAP
(d) TACACS+
A. a, b & d only
B. b, c & d only
C. a, b &c only
D. All of the above

Answer : C

Question 24 ( Topic 1 )
Which of the following statements are true? (Choose all that apply)
(a) Exceptions and notifications can be configured to use specific HTTP response codes.
(b) Exceptions and notify user objects can be created through the VPM.
(c) Exceptions and notify user objects can be utilized as action objects in the VPM.
(d) Exceptions and notify user objects can include substitutions such as the IP address, username or category.
A. a & b only
B. a, c & d only
C. b & c only
D. a, b & c only

Answer : B

Question 25 ( Topic 1 )
What changes, when FIPS mode for Management Console is enabled?
A. FIPS mode improves browser support
B. Management Console can be accessed via TLS-based HTTPS only; some device certification options are changed
C. FIPS mode makes Management Console application faster as the rich client download size decreases

Answer : B

Question 26 ( Topic 1 )
Which statement is true about a ProxySG with factory settings:
A. To get network access, initial setup is necessary ProxySG does not have an IP address until then
B. Unconfigured ProxySG responds to some of the pre-built IP addresses, which are contained in the private IP address ranges 10.0.0.0/255.0.0.0 and 172.16.0.0/255.240.0.0 and 192.168.0.0/255.255.0.0 .
C. Unconfigured ProxySG tries to obtain IP address from a DHCP server
D. Unconfigured ProxySG sends RARP request to look up its IP address from the MAC address of its network interface card. If it cannot get a valid IP address, initial setup is required.

Answer : A

Question 27 ( Topic 1 )
Find the configuration or management activity that is NOT among the functions of the Blue
Coat Director CANNOT be used?
A. Configuration of a large number of ProxySG appliances
B. Policy updates on ProxySG appliances
C. Virus definition updates for AV scanning
D. Setup and licensing
E. All the above actions can be done by a Director

Answer : D

Question 28 ( Topic 1 )
What is true immediately after the initial setup of ProxySG?
A. None of the content filtering databases is set up
B. Only the default Blue Coat WebFilter database is set up and available
C. Blue Coat WebFilter database and 3rd party databases are set up and available

Answer : A

Question 29 ( Topic 1 )
Which WAN Optimization feature can accelerate the transfer of several similar, uncompressed files between two locations? (Two files are called similar, if their editing distance is small, compared to the size of the files. For example, if one file can be obtained from another one by inserting or deleting a small fragment.)
A. Protocol Optimization
B. Object Caching
C. Byte Caching
D. Bandwidth Management

Answer : C

Reference:http://www.bluecoat.com/sites/default/f ... pression.1
.pdf(last paragraph with cream background)
Question 30 ( Topic 1 )
What preconditions should be satisfied in order to do initial configuration from a client computer via the URL https://proxysg.bluecodt.com:8083? (choose all that apply)
(a) Client computer should be directly connected to ProxySG with a cross-over cable
(b) ProxySG should have a pass-through card
(c) ProxySG should be deployed in the bridging mode
A. a & b only
B. a & c only
C. b & c only
D. All of the above

Answer : B

Reference:http://download.cacheflow.com/manuals/S ... all_4x.pdf

Question 31 ( Topic 1 )
How many different anti-virus scanning engines can you run simultaneously on a ProxyAV?
A. 1
B. 2
C. 3
D. 4

Answer : A

Reference:http://forums.bluecoat.com/viewtopic.php?f=2&t=6687
Question 32 ( Topic 1 )
Which HTTP error code corresponds to the ProxySG default exception identifier icap_error?
A. 403
B. 404
C. 503
D. 401

Answer : C

Question 33 ( Topic 1 )
Which is NOT a support- related site for Blue Coat products?
A. http://forums.bluecoot.com
B. http://services.bluecoat.com
C. http://download.bluecoat.com
D. http://webpulse.bluecoat.com

Answer : D

Question 34 ( Topic 1 )
When accessing Management Console from the Web, the built in admin account uses the regular password of CLI access (NOT the enable password of admin account)
A. True
B. False

Answer : A

Question 35 ( Topic 1 )
Which software product provides Web content filtering for windows and Mac OS computers, is locally configurable, and can produce a barking sound, when user violates a filtering policy.
A. ProxyAV
B. Blue coat WebFilter
C. Blue Coat k9
D. Blue Coat Director

Answer : C

Question 36 ( Topic 1 )
Which HTTP error code corresponds to the ProxySG default exception identifier icap_error?
A. 403
B. 404
C. 503
D. 401

Answer : C

Question 37 ( Topic 1 )
An administrator created a PIN for the ProxySG front panel, disabled the built-in administrative account and introduced policy-based admin authoritarian, and secured die serial port. After this was done, all the PINs, passwords and policy settings were lost. What options are available to regain access to the appliance? (Choose all that apply)
(a) Return ProxySG appliance to Blue Coat to restore a default SGCS image
(b) Restore the factory settings by pressing and holding a reset button for 5 seconds, configure the appliance anew or restore its configuration from a backup
(c) Try out all 10000 combinations of PIN for the front panel until you find the right one
(d) Remove the hard disk from the ProxySG, connect it as an external SAT A disk to any
Windows or Linux computer; clear the admin entry in the /etc/ pssswd file on that disk. Put thehard disk back in ProxySG, start it up and reset the admin's password.
A. a only
B. a & b only
C. a & c only
D. a & d only
E. All of the above

Answer : B

Question 38 ( Topic 1 )
When the ProxySG 200's power LED indicator alternates between green and amber, it means that the system is booting.
A. True
B. False

Answer : B

Reference:http://download.cacheflow.com/manuals/S ... all_4x.pdf(page 10 and33)
Question 39 ( Topic 1 )
The ProxySG operating system is based on________.
A. a customized, object oriented version of FreeBSD
B. a custom built operating system with integrated caching and compression
C. a Linux Kernel 2.6.x with byte caching and compression

Answer : B

Reference:http://www.1st-computer-networks.co.uk/ ... g_8000.php(first paragraph)
Question 40 ( Topic 1 )
The ProxySG ICAP implementation is fully compatible with which of the following applications? (Choose all that apply)
(a) Finjan SurfinGate
(b) Webwasher
(c) Antivirus Scan Engine (SAVSE)
(d) Trend Micro InterScan
A. a & b only
B. b & c only
C. c & d only
D. All of the above

Answer : D

Reference:http://www.google.com.pk/url?sa=t&rct=j ... ap%20imple mentation%20is%20fully%20compatible%20with&source=web&cd=1&ved=0CBoQFjAA&ur l=http%3A%2F%2Ffr.bluecoat.com%2Fdoc%2F472&ei=dvLcTo_tGo7Bswb- i6XaCw&usg=AFQjCNF6l2iVhRnUsnok6RYXOeyq2PdGmw(page 1, second paragraph)

Question 41 ( Topic 1 )
Which HTTP error code corresponds to the ProxySG default exception identifier policy_denied?
A. 403
B. 404
C. 503
D. 401

Answer : A

Reference:http://www.bluecoat.co.jp/downloads/man ... _4.1.2.pdf(page 210, topic: discussion)
Question 42 ( Topic 1 )
The ProxySG acts as both an ICAP client and ICAP server.
A. True
B. False

Answer : B

Reference:https://docs.google.com/viewer?a=v&q=ca ... coat.com/d oc/472+The+ProxySG+acts+as+icap+client&hl=en&gl=pk&pid=bl&srcid=ADGEESiaHBmU bYdeiEjps_lGWA_vUAYP1ctDWl0X-
BFDCEIJtzrO4RRIFGUkaGoP3azr_pnR3GtKn0jAsyhgYvt4ZSWYi5BLMwYdXo-0hee8-
ZqvW_rbULf-bwpNJv9NU7tQx0PWOlet&sig=AHIEtbSvvzaRIKw2Y6ZnmILigR9R- pEAhA(page 2, note)
Question 43 ( Topic 1 )
Which of the following methods is NOT appropriate for the initial setup for a ProxySG 2010 series?
A. Serial console Cable
B. LCD Panel
C. Web Wizard accessing HTTPS port 8083
D. Blue Coat Director applying a profile

Answer : B

Question 44 ( Topic 1 )
Which appliance does not need any licensing and is fully operable after deployment?
A. ProxyAV
B. ProxySG
C. ProxyRA
D. Blue Coat Director

Answer : D

Reference:http://forums.bluecoat.com/viewtopic.php?f=3&t=1996
Question 45 ( Topic 1 )
What ProxySG appliance has these default settings?
(a) Default policy is ALLOW
(b) Trust client destination IP is ON
(c) Tolerate HTTP errors is ON;
A. Proxy Edition
B. Reverse Proxy Edition
C. MACH5 Edition
D. Trial Edition

Answer : C

Question 46 ( Topic 1 )
If a proxy server is seen in the external Internet as Web server, it is a forward proxy.
A. True
B. False

Answer : B

Question 47 ( Topic 1 )
Which capabilities are limited in Blue coat Reporter standard edition compared to
Enterprise edition? (Choose all that apply)
(a)Data profile number is limited to five
(b)Reports can be displayed, but cannot be saved as PDF or CSV
(c)Only single processor is supported
(d)Report customization is limited
A. a, b & c only
B. a, b & d only
C. a, c & d only
D. b, c & d only
E. All of the above

Answer : C

Reference:https://kb.bluecoat.com/index?page=content&id=KB1770
Question 48 ( Topic 1 )
Which Instant Messaging proxies are available on the ProxySG? (Choose all that apply)
(a) AIM
(b)Jabber
(c) MSN
(d) Yahoo
A. a, b & c only
B. a, b & d only
C. A. c & d only
D. b. c & d only
E. All of the above

Answer : C

Question 49 ( Topic 1 )
What can be concluded about this request processing order?
A. ProxyAV is accessed in ICAP REQMOD mode
B. ProxyAV is accessed ICAP RESPMOD mode
C. ProxySG with ProxyAV is deployed as a forward proxy
D. Proxy SG with ProxyAV is deployed as a reverse proxy

Answer : A

Question 50 ( Topic 1 )
Which ProxySG technology uses the data processing pipeline similar to the one shown in the picture?

A. Blue Coat Reporter
B. MACH5
C. BCWF
D. ProxySG Services

Answer : B

Reference:http://www.google.com.pk/url?sa=t&rct=j ... aching%20b yte%20caching%20compression&source=web&cd=4&ved=0CC0QFjAD&url=http%3A%2F
%2Ffr.security.westcon.com%2Fdocuments%3FdocumentId%3D11302%26filename%3Df pe_mach5_uk_0207.pdf&ei=EbHZTruyD8fktQaBra3OCw&usg=AFQjCNF6voBuoRTw3eL6
-THIOM7Tj6yOew

Question 51 ( Topic 1 )
The ProxySG gives you the ability to write policies through.
A. the graphical visual Policy Manager and/or the command-line interface
B. Visual Policy Manager only
C. the graphical visual Policy Manager, the command-line interface and/or imported text file

Answer : C

Question 52 ( Topic 1 )
Which HTTP error code corresponds to the ProxySG default exception identifierdns_unresolved_hostname?
A. 403
B. 404
C. 503
D. 401

Answer : B

Question 53 ( Topic 1 )
ProxySG has to be deployed inline (in bridging mode) or virtually inline (using WCCP or an
L4 switch) in order to block IM traffic.
A. True
B. False

Answer : B

Reference:http://download.cacheflow.com/release/S ... tes_Limits
_4.2.1.htm(topic: bridging)
Question 54 ( Topic 1 )
To implement ProxySG as a default gateway, which of the following options has to be enabled?
A. Early Intercept
B. Reflect Client IP
C. IP Forwarding
D. Detect Protocol

Answer : C

Explanation: http://bradal.com/nl/pages/candn/blueco ... sproxy.htm(search ip forwarding)
Question 55 ( Topic 1 )
The goal of creating and using Notify User objects is (Choose all that apply)
(a) to deny access to a URL
(b) to deliver a splash page to the clients
(c) to warn a user before allowing access to a URL
A. a & b only
B. b & c only
C. All of the above

Answer : B