nerdexam
Cisco

350-701 · Question #322

An administrator configures a Cisco WSA to receive redirected traffic over ports 80 and 443. The organization requires that a network device with specific WSA integration capabilities be configured to

The correct answer is A. Configure transparent traffic redirection using WCCP in the Cisco WSA and on the network. To transparently redirect traffic from a network device to a Cisco WSA for invisible proxying and increased visibility, transparent traffic redirection using WCCP must be configured on both the WSA and the network device.

Submitted by obi.ng· Mar 30, 2026Content Security

Question

An administrator configures a Cisco WSA to receive redirected traffic over ports 80 and 443. The organization requires that a network device with specific WSA integration capabilities be configured to send the traffic to the WSA to proxy the requests and increase visibility, while making this invisible to the users. What must be done on the Cisco WSA to support these requirements?

Options

  • AConfigure transparent traffic redirection using WCCP in the Cisco WSA and on the network
  • BConfigure active traffic redirection using WPAD m the Cisco WSA and on the network device
  • CUse the Layer 4 setting in the Cisco WSA to receive explicit forward requests from the network
  • DUse PAC keys to allow only the required network devices to send the traffic to the Cisco WSA

How the community answered

(16 responses)
  • A
    75% (12)
  • B
    13% (2)
  • C
    6% (1)
  • D
    6% (1)

Why each option

To transparently redirect traffic from a network device to a Cisco WSA for invisible proxying and increased visibility, transparent traffic redirection using WCCP must be configured on both the WSA and the network device.

AConfigure transparent traffic redirection using WCCP in the Cisco WSA and on the networkCorrect

WCCP (Web Cache Communication Protocol) is the Cisco-specific mechanism used to transparently redirect web traffic from a network device (like a router or firewall) to a Cisco WSA, ensuring that users are unaware their traffic is being proxied.

BConfigure active traffic redirection using WPAD m the Cisco WSA and on the network device

WPAD is used for explicit proxy configuration, where clients are aware of the proxy, which contradicts the requirement for the process to be 'invisible to the users'.

CUse the Layer 4 setting in the Cisco WSA to receive explicit forward requests from the network

Explicit forward requests mean clients are configured to use the proxy, which is not transparent; Layer 4 settings don't inherently provide invisible redirection from network devices.

DUse PAC keys to allow only the required network devices to send the traffic to the Cisco WSA

PAC (Proxy Auto-Configuration) files are used for client-side explicit proxy configuration, not for transparent redirection from network devices, and 'PAC keys' is not a standard concept.

Concept tested: Cisco WSA WCCP transparent redirection

Source: https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa11-0/user_guide/b_WSA_AsyncOS_11_0_User_Guide/b_WSA_AsyncOS_11_0_User_Guide_chapter_0100.html

Topics

#Cisco WSA#WCCP#Transparent Proxy#Web Proxy Configuration

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 350-701 Practice