BCCPP Exam Questions

In an SSL transaction in which the server's certificate is not from a trusted authority, which entity generates the warning that is displayed in a web browser?

When Blue Coat Director is used to manage a ProxySG, which one of these methods can Director use to prevent unexpected changes from being made directly on the ProxySG?

When authenticating a guest user in an LDAP realm, which of these CPL properties would best be used to specify that the guest user should be part of the pre-defined LDAP group Mobi...

When SGOS processes a client HTTP request, how many server workers are associated with each client worker?

Which Blue Coat product is best suited for simultaneously administering a large number of ProxySG appliances?

In a typical client HTTP request, identify the four principal policy checkpoints in the order they are reached.

When creating a policy-driven trace, which CPL property specifies the name of the policy trace file into which matching transactions are traced?

In CPL, what is the difference between Deny and Force Deny?

Which policy file can be automatically updated when the ProxySG detects changes to an external source?

Without asking a user or physically inspecting their computer, how can you determine which version of web browser they are using to make requests that are intercepted by the ProxyS...

When one ProxySG forwards HTTP requests to another ProxySG, does the originating ProxySG send a server-style GET request or a proxy-style GET request?

If the ProxySG and a client cannot successfully authenticate the use of Kerberos credentials during authentication in a realm where use of Kerberos credentials is enabled, what hap...

An HTTP request containing which header instructs the content server to return whether the requested object has been modified since the last visit?

SGOS is based on which other operating system?

What type of filesystem does SGOS use?

When a downstream ProxySG requests an object that already is cached in an upstream ProxySG, the downstream ProxySG checks the object's freshness with the origin content server.

If a user agent that does not support authentication tries to request content through a connection on which the ProxySG requires authentication, how can you best resolve the issue?

When writing CPL, should layers containing the most general rules usually appear near the beginning or the end of a policy file?

To create policy that tests only for the authentication error of expired_credentials, can you use the VPM, CPL, or either?

For the above URL, will the trigger url.domain=bluecoat.com match or miss?

If a CPL rule contains more than one trigger, how are the triggers evaluated?

Which of these possible problems does a nearly-full ProxySG disk indicate? (Select all that apply)

When the ProxySG processes installed policy as part of a client transaction, how does it handle a rule that contains a syntax error?

When the ProxySG processes a client request to a server that requires a client certificate, from where does the ProxySG obtain the certificate during transaction processing?

If a mobile client is using ProxyClient and sends traffic through a ProxySG, which content filtering policy has priority?

To implement ProxySG as a default gateway, which of the following options has to be enabled?

When virus scanning functionality is enabled, ProxySG acts as an ICAP server, and ProxyAV as an ICAP client.

What are requirements for client's browser for notification and coaching pages to work properly?

Which option is NOT available to upload logfiles from ProxySG?

What kind of object should be selected from button New in the New Action dialogue in the VPM that returns a coaching or splash page?

The ProxySG simultaneously opens multiple server connections to retrieve objects referenced on a web page before the client actually issues the requests for those objects. This sta...

In CPL, using the define category construct with a list of 1,000 URLs usually produces more efficient code than explicitly specifying each individual URL as a separate test.

In a hybrid configuration using the ProxySG in conjunction with the Blue Coat Cloud Service Web Security Module, how does the ProxySG determine when content filtering should be pro...

Which policy file is processed last?

What type of SGOS software worker can be invoked to perform pipelining of HTTP requests?

Which standard CA certificate list on the ProxySG is normally used in processing client-server SSL transactions?

When permitting guest authentication, what is one way that can require users to specifically state that they wish to authenticate as a guest?

Can the ProxySG initiate a transaction that does not correspond to a client action?

Objects that require more server-side bandwidth and response time are less likely to be deleted from the cache. This statement best describes which ProxySG caching technique?

True or false: The ProxySG can apply policy to Flash traffic without requiring the installation of an add-on license.

An excessively high internal CPU temperature can be detected and reported by the ProxySG.

Is it possible to run more than one version of a BCAAA acceptor on a Windows computer?

When ProxyClient is installed on a mobile workstation, from where is the ProxyClient software normally downloaded?

When the ProxySG processes a client request to a server that requires a client certificate, how does the ProxySG determine which certificate to present to the server?

Which one of these statements is NOT true about the caching architecture of the ProxySG?

When using a transparent proxy connection, the ProxySG detects Flash traffic using listeners for which proxy service by default?

By default, what method does the ProxySG use to balance traffic load among members of a forwarding group?

When performing anti-virus scanning using Blue Coat appliances, how does the ProxySG determine what specific actions to perform for high-performance or maximum-security deployments...

When the ProxySG determines whether a user is a member of an LDAP group, is that considered authentication or authorization?

In which two of these cases must you specify a virtual URL to be used in conjunction with Kerberos authentication? (Select 2)