GoConqr has a new look! Let us know what you think.

Sign up free

Flashcards

Symantec Proxy 1 of 2

Lee Horwood English 200 cards

Cards in this deck (200)

  1. 1Which of the following services are provided by the ProxySG (select all that apply)Policy Enforcement; Authentication Support; Encrypted traffic management.
  2. 2True of False – A primary difference between a proxy server and a firewall is that a proxy is not fundamentally a router.True
  3. 3True or False (Symantec) Blue Coat maintain a YouTube channel where information videos are posted?True
  4. 4What is SGOS?Secure Gateway Operating System, the custom built OS for Symantec/Blue coat proxies (not Unix/Linux/Windows).
  5. 5Which deployment method represents a single point of failure?In-Line
  6. 6In which type of physical deployment does a ProxySG have potential visibility to all traffic through the use of a device such as a WCCP-capable router or a Layer 4 switch?Transparent (Web Caching Content Protocol – Cisco defined protocol).
  7. 7Name three methods by which client configuration can be performed in an explicit ProxySG deployment.A) Manual on browser with Ip pointing. B) and C) using a PAC file.
  8. 8In which client connection type are user agents aware that a proxy has been deployed?Explicit
  9. 9In an explicit ProxySG deployment, the TCP packet sent from the client to the ProxySG would contain what value as the destination IP address?The Proxy IP Address
  10. 10In a transparent ProxySG deployment, the TCP packet sent from the client to the ProxySG contains what value as the destination IP address?The Destination Server
  11. 11What client-side technology does the management console use?Java
  12. 12What are the three main tabs on the management console?Statistics; Configuration and Maintenance
  13. 13In the management console, how can you determine the serial number of the ProxySG?S/N on the banner. Or go to Maintenance > System + Disks
  14. 14How does the Management console perform commands on the ProxySG?CLP/CLI
  15. 15What happens if two administrators on separate web browsers both change the time zone on the ProxySG?Last one wins
  16. 16If you revert three times in the management console, what happens?same as if you clicked it once, only works on non-applied changes
  17. 17When you click the help button in the management console, what type of help can you expect to receive?Context sensitive help, depending on where you are on the management console
  18. 18What does each proxy service specify (find answer)A,C
  19. 19Which of the following is responsible for detecting incoming traffic that matches specific IP addresses or subnets? (find answer)A
  20. 20Which of the following is NOT a component of a proxy service listener? (find answer)C
  21. 21What needs to be selected for the Explicit HTTP service to be able to hand off SSL traffic? (find answer)D
  22. 22True of False: Depending on the deployment mode, policy can still be applied to bypassed traffic?False
  23. 23What instructs the ProxySG to skip processing requests sent from specific clients to specific servers? (find answer)A
  24. 24True or False: An HTTP request made by a server to a client uses a GET request method?False
  25. 25What is the default TCP port for HTTP?80
  26. 26What is always included in both the request and response headers? (find answer)A
  27. 27When a server receives a GET request method, how does it know where to retrieve the requested information? (find answer)C
  28. 28What is the purpose of the conditional GET request? (find answer)A
  29. 29How does a POST request method differ from a GET request? (find answer)C
  30. 30What are the common elements of a GET request? (find answer)A, B, C
  31. 31If you use the VPM to create policy, you can also write your own CPL outside the VPM to create additional policy?Yes
  32. 32What policy tasks require using the VPM and cannot be performed in CPL?Nothing
  33. 33When policy created in the VPM is installed, what two files does the VPM update on the ProxySG?VPM.xml & VPM.cpl files
  34. 34What is the purpose of the VPM-XML file?Visual representation of the VPM
  35. 35Are VPM rules grouped into layers, or are layers grouped into rules?Multiple rules into a single layer
  36. 36Can you have more than one web access layer active in the VPM at any given time?Yes, this is the norm
  37. 37What are the four types of VPM trigger objects?Source / Destination / Time / Service
    ie
    User / IP - User / UP - Time Category - Port / Catagory
  38. 38In the VPM, a URL category such as "Travel" or "Hacking" is an example of what type of trigger?Destination
  39. 39When rules in a VPM later are being evaluated, what causes evaluation to stop and proceed to the next layer?Match on the rules
  40. 40If the VPM has two web access layers, which one is evaluated first?Left to Right ordered
  41. 41If the VPM displays a web access layer on the left edge and the Web authentication layer to the right of the Web access layer, which is evaluated first?Authentication, as has to be done first (Syntax (Similar to compiler), will always put at front)
  42. 42Where is the Webfilter database stored (find answer)A, B
  43. 43What does it mean if a URL is categorized by WebFilter as "Pending" (find answer)B
  44. 44True or False: The on-box web filter database is checked only if the off-box database returns a category of "None"False - Other way round
  45. 45True of False: A local database can be sued as an alternative to or in combination with either an on-box or off-box web filter database?True
  46. 46What allows webpulse to provide real-time revisions to the webfilter database? (find answer)A
  47. 47How many languages does the Global intelligence network include in its URL analysis?55
  48. 48Which threat risk level would likely be assigned to an unproven URL without an established history of normal behaviour?C - Medium (5/6)
  49. 49Which services are included in the Intelligence Services Advanced Bundle?D - All of the Above
  50. 50True or False: The Geolocation feature allows you to block URL requests only from countries who allow this serviceFalse
  51. 51Identify 3 methods by which the proxySG can detect the type of a file that is downloaded?File Extension, HTTP content Mime Type, Apparent Data Type
  52. 52Of the methods that the ProxySG uses to detect file type, which one is usually the most accurate?Apparent data type
  53. 53What is one drawback to using apparent data type to detect the file type?Most resource intensive
  54. 54What detection method would not detect a mismatch between file name and its content type?File extension
  55. 55To detect the apparent data type of a downloaded file, do you need to use CPL, or can the VPM be used?Either
  56. 56A downloaded file is named file.jpg and identifies as an HTTP content-type of text/plain, but is actually a windows executable file. how would the Proxy SG handle this?Depends on the policy...
  57. 57What are the two types of ProxySG exceptions?Built in & User defined
  58. 58When the ProxySG sends an exception page to a client, where does it get the text of the exception page?exception definition file
  59. 59How do you create a new built-in exception page on the ProxySG?You cant
  60. 60From where does the exception exception.user-defined.all inherit its properties?Exception.All
  61. 61In the VPM, what type of object is a Notify user object?Action
  62. 62After receiving a splash page from the ProxySG, how often will a user receive a subsequent splash page?User defined regular period
  63. 63By default, how often are ProxySG access logs uploaded to an external database or server?Default is every 24h at 2am. otherwise user defined
  64. 64What are the 5 components of a log facility?Log file, Log Format, Upload Schedule, Rotation Schedule, Upload credentials
  65. 65By default, HTTP traffic that is logged is recorded to which log faculty?Facility called main, then inside that are different formats
  66. 66By Default, what log format is associated with the main log facility?Bluecoat reporter main v1
  67. 67What does the ELFF string cs-bytes represent?Total bytes send from client to ProxySG Server
  68. 68If an access log file has no header, how does the bluecoat reporter process the file?It Cant
  69. 69When uploading access logs, which type of upload uses the least disk space on the Proxy SG?Continuous
  70. 70If you have confirmed continuous uploading of access logs and the ProxySG is unable to reach the upload destination, what happens to the log entries?Stay on the proxy until next available, AKA temporarily stored
  71. 71In the VPM, access logging is controlled by which type of objects?Action
  72. 72True or False: Access logging is disabled by default, you must configure the ProxySG to intercept the protocols that you wish to log?True
  73. 73IF you do not enable authentication on the ProxySG, you can still write policy to control client access to web content?Yes, via IP address or an any to something rule.
  74. 74On the ProxySG, can more than one authentication realm be active at any given time?Yes, with Multi-Tennancy
  75. 75Which type of authentication realm does not request communications with an external authentication server?Local, created on the box, but this shouldn’t be done, it’s very time consuming to add new users.one
  76. 76What is the primary benefit of using IWA authentication realms? a. Single sign-on experience for users b. Greater security than LDAP c. Better performance by using NTLM credentials d. Ability to use Kerberos credentialsa. Single sign-on experience for users
  77. 77When must BCAAA be used? a. When you need to establish more than one Schannel to increase performance b. When Basic credentials are used c. When more than one ProxySG are deployed d. When the ProxySG cannot directly use APIs that require traditional operating systemsd. When the ProxySG cannot directly use APIs that require traditional operating systems
  78. 78Why is authentication using Basic credentials typically used over HTTPS? a. No cookies are required. b. No session identifier is required. c. Username and password are base-64 encoded. d. No other credentials are compatible with HTTPS.c. Username and password are base-64 encoded.
  79. 79When does the ProxySG establish an Schannel? a. When a client request is first received b. When the client sends an NTLM type 2 message to the ProxySG c. When the client sends an NTLM type 3 message to the ProxySG d. When IWA authentication failsc. When the client sends an NTLM type 3 message to the ProxySG
  80. 80Historically, now many Schannel connections have been allowed at a time? a. 1 b. 3 c. 100 d. It depends on the ProxySG deployment modea. 1
  81. 81Why is Kerberos performance better than NTLM? a. It uses less encryption b. Only two round trips are required between the browser and an authentication server c. It works with later versions of Microsoft Windows d. None of these answersd. None of these answers
  82. 82When does a client use a TGT? a. When requesting a service ticket from the KDC b. When authenticating to the KDC c. When the ProxySG responds with a 407 response code d. When upgrading from NTLM to Kerberosa. When requesting a service ticket from the KDC
  83. 83What are the three types of ProxySG surrogates?IP, Cookie and Explicit
  84. 84What does the authentication mode specify?Challenge type and accepted surrogacy.
  85. 85When the ProxySG uses a virtual URL for user authentication, what must the virtual URL point to?A hostname that can be resolved to the DNS name of the proxy, but usually cfauth.com
  86. 86What would happen if the ProxySG did not use surrogate credentials to authenticate users who use transparent proxy connections?Users would have to re-authenticate for every single domain they went to.
  87. 87When a ProxySG processes an SSL transaction between a client and a content server, does the ProxySG function as an SSL client or as an SSL server?Both
  88. 88When the ProxySG processes a client request to a server that requires a client certificate, from where does the ProxySG obtain the certificate during transaction processing? a. The ProxySG generates a CSR and sends it to the client b. From a store on the ProxySG into which client certificates were previously uploaded c. From WebPulse d. From the authentication serverb. From a store on the ProxySG into which client certificates were previously uploaded
  89. 89What categories of traffic are typically not decrypted (select all that apply)? a. Financial Services b. Health c. Social Media d. News Mediaa. Financial Services
    b. Health
  90. 90True or false: The ProxySG must obtain the consent of the client before it can emulate a certificate.False.
  91. 91True or False: For the ProxySG to decrypt SSL traffic, the traffic needs to be intercepted by a proxy service.True
  92. 92When a browser is configured to use an explicit proxy connection to the ProxySG, incoming HTTPS traffic from that browser is intercepted by which proxy service? a. Explicit HTTP b. HTTPS c. SSL d. TCP Tunnela. Explicit HTTP
  93. 93When a browser is configured to use an explicit proxy connection to the ProxySG, which service setting determines whether the traffic is passed to the SSL proxy or the HTTP proxy? a. Detect protocol b. Enable SSL, TLS c. Forward client cert d. Authenticate-401a. Detect protocol
  94. 94Which VPM layer can be most commonly used to control decrypting of SSL traffic by authenticated username? a. SSL Intercept layer b. SSL Authentication layer c. Web Authentication layer d. None of these answersa. SSL Intercept layer
  95. 95In the event of an exception, how does the SSL proxy handle HTTPS traffic? a. Performs malware scanning. b. Intercepts the SSL connection and sends an error page to the user. c. Applies content filtering policy d. Blocks the traffic.b. Intercepts the SSL connection and sends an error page to the user.
  96. 961. Which of the following are recommended to improve CPU performance? a. Enable DHE b. Reduce the number of emulated certificates c. Deny wildcard certificates d. Edit the size of emulated certificatesb. Reduce the number of emulated certificates
    d. Edit the size of emulated certificates
  97. 97What is typically the biggest load on CPU? a. Emulating certificates b. Using RSA c. MD5 d. SHA-2a. Emulating certificates
  98. 98True or false: You can use categories to specify which traffic should be encryptedTrue
  99. 99True or false: Editing the emulated certificate size can help performance.True
  100. 100SGOS is based on which other operating system?It isnt
  101. 101Is SGOS a 32-bit or 64-bit operating system?Can be both, but, 64
  102. 102When SGOS processes a client HTTP request, how is a client worker started?By the administrator process.
  103. 103When SGOS processes a client HTTP request, how many server workers are associated with each client worker?0 or 1, depending if allowed or not.
  104. 104How are policy checkpoints used to evaluate the installed policy on a ProxySG?At the relevant check point the relevant information is checked, so depends on how much information a policy holds.
  105. 105In a typical client HTTP request, identify the four principal policy checkpoints in the order they are reached.Clint in, server out, server in, client out.
  106. 106What type of filesystem does SGOS use?It doesn’t.
  107. 107What happens when a disk is removed from a ProxySG while it is running?The rest of the data is mapped across the disks.
  108. 108Client side or server side: Where does ProxySG object caching usually result in the most bandwidth savings?Server side.
  109. 109How does the ProxySG locate an object in its cache?Hashing the URL, which leads to a location in the database.
  110. 110An HTTP request containing what header instructs the content server to return whether the requested object has been modified since the last visit?Get if modified since message.
  111. 111The HTTP request header Pragma: no-cache performs the same function as what other header?Cash control no cash.
  112. 112Objects that require more server-side bandwidth and response time are less likely to be deleted from the cache. This statement best describes which ProxySG caching technique?Cost-based deletion.
  113. 113The ProxySG simultaneously opens multiple server connections to retrieve objects referenced on a web page before the client actually issues the requests for those objects. This statement best describes which ProxySG caching technique?Pipelining, (turned off by default in the newest release.)
  114. 114When creating policy in the VPM, where can you instruct the ProxySG to enable or disable pipelining of referenced objects?Web content layer.
  115. 115How can you instruct the ProxySG to disregard the HTTP request header Pragma: no-cache?Untick the ‘pragma no cache meta’ tag.
  116. 116True or false: The object store uses a directory structure so that objects in the cache can be accessed quickly.False, it’s an object store with no directory structure.
  117. 117True or false: Objects with similar URLs are usually located next to each other so that accessing related objects in a sequence is faster.False. They are deliberately split across separate disks.
  118. 118What is the main advantage of performing a packet capture on the ProxySG rather than on a client?See both sides of the communication (either side of the proxy).
  119. 119When the disk space on a ProxySG is full, what features or functions become unavailable?None, it’s the default state of the box.
  120. 120Where in the Management Console would you look to find all sessions that are being intercepted by the services framework of the ProxySG?Statistics -> sessions -> active sessions ->
  121. 121Which built-in tool would you use to monitor the status of external resources?Health checks.
  122. 122Where would you look to find a record of all of configuration changes, as well as which administrator account committed those changes?Event logs.
  123. 123True or false: A policy trace flags malfunctioning policyFalse, shows you what a policy does. A definitely malfunctioning policy wouldn’t install.
  124. 124By default, how often does a ProxySG send a heartbeat?Every 24 hours.
  125. 125Which metric is generally not helpful in troubleshooting performance issues?Disk utilisation (unless it’s very low)
  126. 126What is used in network management systems to monitor network devices for health or status conditions that require administrative attention?SNMP.
  127. 127Identify the five aspects of ProxySG behavior that policy controls.Access to web resources, User authentication, cache content, Aspects of request and response processing, access logging (Page 202)
  128. 128When the ProxySG processes installed policy, how does it handle a rule that contains a syntax error?It won’t install.
  129. 129Which policy file can be automatically updated when the ProxySG detects changes to an external source?Central policy file.
  130. 130Which policy file is processed first?Threat protection policy file.
  131. 131In a CPL context, which of the following purposes are served by transactions?Exposes request to response test, for testing the policy evaluation.
  132. 132Organize CPL components such as layers and rules into descending order based on how they are organized in policy.Policies -> layers -> rules -> conditions -> triggers
  133. 133Which CPL component tests one aspect of a request against a Boolean expression of values?Conditions (triggers according to the book)
  134. 134What stops further rule processing in a layer?When a rule is matched.
  135. 135Which type of action modifies the transactions performed by the ProxySG?Defined action.
  136. 136What information is stored in a policy trace for a proxy service that is set to Bypass?None
  137. 137A global policy trace can be invoked from which two sources?Management console and CLI.
  138. 138When will a policy trace report a rule processing result of “N/A”?If the rule makes no sense to the transaction that it’s processing. E.g. FTP rule handling a HTTP traffic.
  139. 139True or false: A policy trace can be enabled for any layer type.True
  140. 140True or false: A policy trace does not show a request being evaluated against a rule that follows in the same layer as the rule that the request triggered.True
  141. 141Under what conditions does a policy-based trace generate a trace?When the rule is matched.
  142. 142If you do not enable authentication on the ProxySG, can you still write policy to control client access to web content?Yes
  143. 143On the ProxySG, can more than one authentication realm be active at any given time?YES, with multi-tenancy.
  144. 144Which type of authentication realm does not require communication with an external authentication server?Local one
  145. 145What is the primary benefit of using IWA authentication realms? a. Single sign-on experience for users b. Greater security than LDAP c. Better performance by using NTLM credentials d. Ability to use Kerberos credentialsa. Single sign-on experience for users
  146. 146When must BCAAA be used? a. When you need to establish more than one Schannel to increase performance b. When Basic credentials are used c. When more than one ProxySG are deployed d. When the ProxySG cannot directly use APIs that require traditional operating systemsd. When the ProxySG cannot directly use APIs that require traditional operating systems
  147. 147Why is authentication using Basic credentials typically used over HTTPS? a. No cookies are required. b. No session identifier is required. c. Username and password are base-64 encoded. d. No other credentials are compatible with HTTPS.d. No other credentials are compatible with HTTPS.
  148. 148When does the ProxySG establish an Schannel? a. When a client request is first received b. When the client sends an NTLM type 2 message to the ProxySG c. When the client sends an NTLM type 3 message to the ProxySG d. When IWA authentication failsc. When the client sends an NTLM type 3 message to the ProxySG
  149. 149Historically, now many Schannel connections have been allowed at a time? a. 1 b. 3 c. 100 d. It depends on the ProxySG deployment modea. 1
    (although now up to 150, depending on the deployment mode)
  150. 150Why is Kerberos performance better than NTLM? a. It uses less encryption b. Only two round trips are required between the browser and an authentication server c. It works with later versions of Microsoft Windows d. None of these answersd. None of these answers
  151. 151When does a client use a TGT (Ticket Granting Ticket, also known as TGS – S for Service)? a. When requesting a service ticket from the KDC b. When authenticating to the KDC c. When the ProxySG responds with a 407 response codea. When requesting a service ticket from the KDC
  152. 152What are the three types of ProxySG surrogates?IP, Cookie and Connection Explicit
  153. 153What does the authentication mode specify?Challenge type and accepted surrogacy.
  154. 154When the ProxySG uses a virtual URL for user authentication, what must the virtual URL point to?whatever we set it as? Default is cfauth.com.
  155. 155What would happen if the ProxySG did not use surrogate credentials to authenticate users who use transparent proxy connections?Would have to authenticate every domain they went to. This would hammer bandwidth!
  156. 156When a ProxySG processes an SSL transaction between a client and a content server, does the ProxySG function as an SSL client or as an SSL server?Both
  157. 157When the ProxySG processes a client request to a server that requires a client certificate, from where does the ProxySG obtain the certificate during transaction processing? a. The ProxySG generates a CSR and sends it to the client b. From a store on the ProxySG into which client certificates were previously uploaded c. From WebPulse d. From the authentication serverb. From a store on the ProxySG into which client certificates were previously uploaded
  158. 158What categories of traffic are typically not decrypted (select all that apply)? a. Financial Services b. Health c. Social Media d. News Mediaa. Financial Services
    b. Health
  159. 159True or false: The ProxySG must obtain the consent of the client (Web Server really) before it can emulate a certificate.False
  160. 160True or False: For the ProxySG to decrypt SSL traffic, the traffic needs to be intercepted by a proxy service.True
  161. 161When a browser is configured to use an explicit proxy connection to the ProxySG, incoming HTTPS traffic from that browser is intercepted by which proxy service? a. Explicit HTTP b. HTTPS c. SSL d. TCP Tunnela. Explicit HTTP
  162. 162When a browser is configured to use an explicit proxy connection to the ProxySG, which service setting determines whether the traffic is passed to the SSL proxy or the HTTP proxy? a. Detect protocol b. Enable SSL, TLS c. Forward client cert d. Authenticate-401a. Detect protocol
  163. 163Which VPM layer can be most commonly used to control decrypting of SSL traffic by authenticated username? a. SSL Intercept layer b. SSL Authentication layer c. Web Authentication layer d. None of these answersa. SSL Intercept layer
  164. 164. In the event of an exception, how does the SSL proxy handle HTTPS traffic? a. Performs malware scanning. b. Intercepts the SSL connection and sends an error page to the user. c. Applies content filtering policy d. Blocks the traffic.b. Intercepts the SSL connection and sends an error page to the user.
  165. 165. Which of the following are recommended to improve CPU performance? a. Enable DHE b. Reduce the number of emulated certificates c. Deny wildcard certificates d. Edit the size of emulated certificatesb. Reduce the number of emulated certificates
    d. Edit the size of emulated certificates
  166. 166What is typically the biggest load on CPU? a. Emulating certificates b. Using RSA c. MD5 d. SHA-2a. Emulating certificates
  167. 167True or false: You can use categories to specify which traffic should be encryptedTrue
  168. 168True or false: Editing the emulated certificate size can help performanceTrue
  169. 169SGOS is based on which other operating system?It isn’t
  170. 170Is SGOS a 32-bit or 64-bit operating system?old can be 32, all new is 64.
  171. 171When SGOS processes a client HTTP request, how is a client worker started?By the administrator process
  172. 172When SGOS processes a client HTTP request, how many server workers are associated with each client worker?1 or none.
  173. 173How are policy checkpoints used to evaluate the installed policy on a ProxySG?At the relevant checkpoint, will have more relative information.
  174. 174In a typical client HTTP request, identify the four principal policy checkpoints in the order they are reached.Client in, server out, server in, client out.
  175. 175What type of filesystem does SGOS use?Undefined hashing object store.
  176. 176What happens when a disk is removed from a ProxySG while it is running?Rest of the data is mapped across the disk.
  177. 177Client side or server side: Where does ProxySG object caching usually result in the most bandwidth savings?Server Side
  178. 178How does the ProxySG locate an object in its cache?performing a hash of the url, which leads to location
  179. 179An HTTP request containing what header instructs the content server to return whether the requested object has been modified since the last visit?“GET if modified since message”
  180. 180The HTTP request header Pragma: no-cache performs the same function as what other header?Cache control no-cache
  181. 181Objects that require more server-side bandwidth and response time are less likely to be deleted from the cache. This statement best describes which ProxySG caching technique?Cost-based deletion
  182. 182The ProxySG simultaneously opens multiple server connections to retrieve objects referenced on a web page before the client actually issues the requests for those objects. This statement best describes which ProxySG caching technique?Pipelining
  183. 183When creating policy in the VPM, where can you instruct the ProxySG to enable or disable pipelining of referenced objects?Web Content Layer
  184. 184How can you instruct the ProxySG to disregard the HTTP request header Pragma: no-cache?Untick the “Parse ‘Pragma-no-cache’ meta tag” on the Proxy settings under configuration.
  185. 185True or false: The object store uses a directory structure so that objects in the cache can be accessed quickly.False
  186. 186True or false: Objects with similar URLs are usually located next to each other so that accessing related objects in a sequence is faster.False
  187. 187What is the main advantage of performing a packet capture on the ProxySG rather than on a client?Both sides of the communication, client to proxy, proxy to server and back.
  188. 188When the disk space on a ProxySG is full, what features or functions become unavailable?None, normal behaviour as fills up with caching.
  189. 189Where in the Management Console would you look to find all sessions that are being intercepted by the services framework of the ProxySG?: Statistics -> Sessions -> Active Sessions -> Proxy
  190. 190Which built-in tool would you use to monitor the status of external resources?Health Checks
  191. 191Where would you look to find a record of all of configuration changes, as well as which administrator account committed those changes?Event Logs
  192. 192True or false: A policy trace flags malfunctioning policyFalse (Depends on how you define ‘malfunctioning’. It only shows what the policy is doing)
  193. 193By default, how often does a ProxySG send a heartbeat?every 24 hours
  194. 194Which metric is generally not helpful in troubleshooting performance issues?Disk space.
  195. 195What is used in network management systems to monitor network devices for health or status conditions that require administrative attention?SNMP
  196. 196Identify the five aspects of ProxySG behaviour that policy controls.- Access to web resources
    - user authentication requirements
    - cache content
    - aspects of request and response processing
    -access logging
  197. 197When the ProxySG processes installed policy, how does it handle a rule that contains a syntax error?There are no syntax errors in installed policy.
  198. 198Which policy file can be automatically updated when the ProxySG detects changes to an external source?Central
  199. 199Which policy file is processed first?Threat Protection File (Bluecoats)
  200. 200Organize CPL components such as layers and rules into descending order based on how they are organized in policy.#1 Policy Contains Layers
    #2 Layers contain rules
    #3 Rules contain conditions and properties
    #4 conditions contain triggers

Information

Description
Flashcards on Symantec Proxy 1 of 2, created by Lee Horwood on 03/02/2019.
Created by
Lee Horwood
Views
2
Rating

Feedback

What is it about?

What do you think of the new look?

How do you like it?