300-320 · Question #613
Management has requested that all web traffic be filtered through a proxy without the client's knowledge. Which mode does an engineer use to design the web proxy to accomplish this task without…
The correct answer is C. transparent mode with WCCP. Transparent web proxy mode with WCCP intercepts HTTP/HTTPS traffic and redirects it to the proxy appliance without any client browser configuration.
Question
Management has requested that all web traffic be filtered through a proxy without the client's knowledge. Which mode does an engineer use to design the web proxy to accomplish this task without additional configuration of the web browser?
Options
- Aexplicit mode with PAC files
- Btransparent mode without WCCP
- Ctransparent mode with WCCP
- Dexplicit mode without PAC files
How the community answered
(39 responses)- A3% (1)
- B8% (3)
- C74% (29)
- D15% (6)
Why each option
Transparent web proxy mode with WCCP intercepts HTTP/HTTPS traffic and redirects it to the proxy appliance without any client browser configuration.
Explicit mode with PAC files requires the browser or OS to be configured with the PAC file URL, meaning the client is aware of and must be set up to use the proxy.
Transparent mode without WCCP requires static policy-based routing or manual network reconfiguration to redirect traffic, and cannot scale dynamically across the network.
WCCP (Web Cache Communication Protocol) allows a router or switch to automatically redirect web traffic destined for port 80/443 to the proxy server; combined with transparent proxy mode, the client browser requires zero configuration and is unaware traffic is being inspected.
Explicit mode without PAC files requires manually entering the proxy server address and port in every client browser, which is the opposite of transparent operation.
Concept tested: Transparent web proxy deployment with WCCP
Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/wccp/configuration/xe-16/wccp-xe-16-book/wccp-oview.html
Topics
Community Discussion
No community discussion yet for this question.