5.6 WCCP Redirection on Cisco Devices CCIE-SECURITY Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A router is configured with WCCP using GRE redirection for the HTTP service group. The WSA is on a different subnet. What is the purpose of GRE in this scenario?

   • ATo encapsulate the redirected packets so they can be routed to the WSA across the network.
   • BTo allow the router to use L2 redirection over the WAN.
   • CTo compress the traffic to reduce bandwidth usage.
   • DTo encrypt the traffic between the router and WSA.
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A network engineer is troubleshooting a WCCP deployment where HTTP traffic is not being redirected to the WSA. The router has the following configuration: 'ip wccp web-cache redirect-list 10' and 'ip wccp web-cache group-list 20'. The access list 10 permits only the subnet 192.168.1.0/24, and access list 20 permits the WSA's IP address. The WSA is on a different subnet and uses GRE redirection. The engineer runs 'show ip wccp web-cache' and sees that the WSA is listed as 'Usable'. However, traffic from the 192.168.1.0/24 subnet is not being redirected. What is the most likely cause?

   • AThe WSA is not configured with the correct router IP.
   • BThe service group is using L2 redirection but the WSA is on a different subnet.
   • CThe group-list is blocking the WSA because it is on a different subnet.
   • DThe redirect-list is applied to the wrong interface.
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   A security administrator is configuring WCCP on a router that is also used for other purposes. They want to ensure that only the WSA can participate in WCCP and that no other devices can spoof WCCP messages. They have enabled MD5 authentication. What additional measure should be taken to prevent spoofing?

   • AApply an ACL on the router that permits only the WSA's IP address to send WCCP packets to the router.
   • BUse a longer MD5 key to increase security.
   • CChange the WCCP service group to a dynamic one.
   • DDisable WCCP on all interfaces except the one connected to the WSA.
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A company has two routers and four WSAs in a WCCP service group. They want to achieve load balancing and redundancy. The routers are configured with WCCPv2. What is the best way to configure the WSAs to ensure they all participate in the same service group?

   • ACreate separate service groups for each router.
   • BConfigure each WSA with only one router IP to avoid conflicts.
   • CUse WCCPv1 to simplify the configuration.
   • DConfigure each WSA with the IP addresses of both routers.
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A network architect is designing a WCCP deployment where the WSA is located in a remote data center, and the router is at a branch office. The WAN link between them is a low-bandwidth link. The architect wants to minimize the overhead of redirection. Which redirection mode should be chosen?

   • AUse policy-based routing to send traffic directly to the WSA.
   • BGRE redirection, because it is the only option when the WSA is not on the same subnet.
   • CUse GRE with compression to reduce bandwidth usage.
   • DL2 redirection, because it has less overhead.
   Reveal Solution Discussion Select an answer first