350-701 · Question #576
An engineer is configuring Cisco WSA and needs to deploy it in transparent mode. Which configuration component must be used to accomplish this goal?
The correct answer is C. WCCP on switch. To deploy a Cisco Web Security Appliance (WSA) in transparent mode, Web Cache Communication Protocol (WCCP) must be configured on a switch or router to redirect web traffic to the WSA.
Question
An engineer is configuring Cisco WSA and needs to deploy it in transparent mode. Which configuration component must be used to accomplish this goal?
Options
- AMDA on the router
- BPBR on Cisco WSA
- CWCCP on switch
- DDNS resolution on Cisco WSA
How the community answered
(64 responses)- A8% (5)
- B5% (3)
- C86% (55)
- D2% (1)
Why each option
To deploy a Cisco Web Security Appliance (WSA) in transparent mode, Web Cache Communication Protocol (WCCP) must be configured on a switch or router to redirect web traffic to the WSA.
MDA (Managed Device Automation) is not a standard component for transparently redirecting web traffic to a WSA.
PBR (Policy-Based Routing) could be used for redirection on a router, but 'PBR on Cisco WSA' is not the typical mechanism for transparent redirection of client traffic *to* the WSA, as the WSA itself doesn't typically implement PBR to receive traffic.
To deploy Cisco WSA in transparent mode, traffic redirection is necessary so that clients do not need to be explicitly configured to use the proxy. Web Cache Communication Protocol (WCCP) is commonly used on Cisco switches or routers to transparently redirect HTTP/HTTPS traffic to the WSA for inspection without client-side configuration.
DNS resolution is fundamental to how the WSA resolves website names, but it's not the component that enables transparent *traffic interception* from clients.
Concept tested: Cisco WSA Transparent Mode deployment
Source: https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa_11-7/user_guide/b_WSA_Admin_Guide_11_7/b_WSA_Admin_Guide_11_7_chapter_0100.html
Topics
Community Discussion
No community discussion yet for this question.