350-701 · Question #491
What are two facts about WSA HTTP proxy configuration with a PAC file? (Choose two.)
The correct answer is C. The PAC file, which references the proxy, is deployed to the client web browser. D. It is defined as an Explicit proxy deployment.. When configuring a Cisco Web Security Appliance (WSA) with a PAC file, the PAC file, which contains proxy references, is deployed to client web browsers for explicit proxy deployment.
Question
What are two facts about WSA HTTP proxy configuration with a PAC file? (Choose two.)
Options
- AIt is defined as a Transparent proxy deployment.
- BIn a dual-NIC configuration, the PAC file directs traffic through the two NICs to the proxy.
- CThe PAC file, which references the proxy, is deployed to the client web browser.
- DIt is defined as an Explicit proxy deployment.
- EIt is defined as a Bridge proxy deployment.
How the community answered
(53 responses)- B4% (2)
- C94% (50)
- E2% (1)
Why each option
When configuring a Cisco Web Security Appliance (WSA) with a PAC file, the PAC file, which contains proxy references, is deployed to client web browsers for explicit proxy deployment.
A transparent proxy deployment intercepts client traffic without explicit client configuration, which is not the case when using a PAC file.
The PAC file directs client traffic *to* the proxy, not *through* the proxy's two NICs; the proxy's NIC configuration is an internal detail of the WSA, unrelated to how a PAC file functions for the client.
A Proxy Auto-Configuration (PAC) file is a script that web browsers use to determine which proxy server to use for a given URL, and it must be distributed to and configured on each client's web browser.
Using a PAC file means that clients are explicitly configured (either manually or via GPO/MDM) to use a proxy, instructing their browsers to send traffic to the WSA, thus defining an explicit proxy deployment.
'Bridge proxy deployment' is not a standard or recognized deployment mode for WSA HTTP proxies with PAC files; explicit and transparent are the common modes.
Concept tested: WSA HTTP proxy configuration, PAC files, Explicit proxy
Source: https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa_11-7/user_guide/b_WSA_UserGuide_11_7/b_WSA_UserGuide_11_7_chapter_0100.html#concept_3C13627443E84F70A603417726488795
Topics
Community Discussion
No community discussion yet for this question.