Free 250-430 sample questions

Correct answer: They would have to reauthenticate for each domain that they access

Without surrogate credentials, transparent proxy users would have to reauthenticate for each domain they access because the ProxySG would not be able to impersonate the user for subsequent authentication requests to different backend servers. Surrogate credentials allow the ProxySG to authenticate on behalf of the user to multiple domains without requiring repeated authentication prompts. The other options are incorrect because authentication would still be possible, and surrogate credentials are specifically needed for transparent proxy scenarios. Reference: https://origin-symwisedownload.symantec.eom/resources/webguides/proxysg/6.6/reverse_proxy_webguide/Content/Topics/Tasks/Authentication/surrogate_credentials_co.htm

Correct answer: Policy tracing

When disk space is full on a ProxySG, policy tracing becomes unavailable because tracing requires disk space to store the trace files and logs. The ProxySG prioritizes core proxy functionality over diagnostic features when storage is constrained. Health checks, event logs, and normal operations continue to function as they require minimal disk space, but policy tracing generates significant data that requires available storage.

Correct answer: The first rule in the layer that matches

The first rule in a layer that matches stops further rule processing in that layer, implementing a "first match wins" policy evaluation model. This ensures predictable policy behavior and prevents conflicting rules from being processed. Later rules are not evaluated once a match is found, and processing continues to the next layer if applicable. The other options incorrectly describe the rule evaluation process. Reference: https://origin-symwisedownload.symantec.com/resources/webguides/sgos/policy/Learn/aboutlayerandruleeval/layerguards.htm

Correct answer: Layers, rules, conditions, triggers

CPL (Content Policy Language) components are organized in descending hierarchical order as: Layers (highest level containers), Rules (within layers), Conditions (within rules that define when rules apply), and Triggers (within conditions that specify the action to take). This hierarchical structure allows for organized and manageable policy configuration in the ProxySG.

Correct answer: When the rule is not reached during evaluation

A policy trace reports "N/A" when a rule is not reached during evaluation, typically because an earlier rule in the same layer already matched and stopped further processing, or because the conditions for reaching that rule were not met. This indicates the rule was not evaluated for the specific transaction being traced, not that it was disabled or nonsensical.

Correct answer: Information relevant to the connection between the client and the server

Both request and response headers always include information relevant to the connection between the client and server, such as connection type, content encoding, transfer encoding, and other connection-specific metadata. DNS queries are handled separately from HTTP headers, ICAP version numbers are protocol-specific, and cipher suites are part of TLS negotiation, not standard HTTP headers.