A network administrator is troubleshooting a WCCP issue where the router is not redirecting traffic to the WSA. The router has the following configuration: 'ip wccp web-cache redirect-list 10' and 'ip wccp web-cache group-list 20'. Access list 10 permits 192.168.1.0/24, and access list 20 permits the WSA's IP. The WSA is on the same subnet as the router's interface. The administrator runs 'show ip wccp web-cache' and sees the WSA is 'Usable'. However, traffic from 192.168.1.0/24 is not being redirected. What is the most likely cause?

The group-list is blocking the WSA because it is on the same subnet.

The interface facing the clients does not have 'ip wccp web-cache redirect' enabled.

The WSA is not configured with the correct service group.

The redirect-list is not permitting the WSA's IP.

A company is running WCCPv1 on their routers and wants to upgrade to WCCPv2 to support multiple routers and better load balancing. They have a single router and two WSAs. What is the primary benefit of upgrading to WCCPv2 in this scenario?

Support for MD5 authentication.

Support for multiple cache engines in a service group.

Support for dynamic service groups.

A network engineer needs to redirect HTTPS traffic to a WSA for SSL inspection. The WSA is on the same subnet as the router. The engineer configures a dynamic service group for TCP port 443. What redirection mode should be used?

L2 redirection, but only if the service group is well-known.

GRE redirection, because HTTPS is a different protocol.

L2 redirection, because the WSA is on the same subnet.

GRE redirection, because dynamic service groups require GRE.

An organization has two WSAs in the same data center to provide redundancy for web filtering. They want to configure WCCP on the router so that if one WSA fails, the other automatically takes over the redirected traffic. What must be configured on the router to achieve this?

Enable WCCP GRE redirection to the primary WSA and set a static route to the secondary.

Create two separate service groups, one for each WSA, and redirect traffic to both.

Configure the router to use WCCPv1 because it supports multiple cache engines.

Add both WSAs to the same WCCP service group and enable load balancing.

CCIE Security

Domain 5Objective 6

5.6 WCCP Redirection on Cisco Devices CCIE-SECURITY Practice Questions (Page 6)

Part of the 5.0 Advanced Threat Protection and Content Security domain, which accounts for 20% of the CCIE-SECURITY exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 1–2 from this objective — we provide 35 practice questions to prepare you well beyond it. (estimate)

35questions here

7free pages

9concepts

20%of the exam

Questions 26–30

26expert · hard
A network administrator is troubleshooting a WCCP issue where the router is not redirecting traffic to the WSA. The router has the following configuration: 'ip wccp web-cache redirect-list 10' and 'ip wccp web-cache group-list 20'. Access list 10 permits 192.168.1.0/24, and access list 20 permits the WSA's IP. The WSA is on the same subnet as the router's interface. The administrator runs 'show ip wccp web-cache' and sees the WSA is 'Usable'. However, traffic from 192.168.1.0/24 is not being redirected. What is the most likely cause?
Select an answer first
27expert · hard
A company is running WCCPv1 on their routers and wants to upgrade to WCCPv2 to support multiple routers and better load balancing. They have a single router and two WSAs. What is the primary benefit of upgrading to WCCPv2 in this scenario?
Select an answer first
28expert · hard
A network engineer needs to redirect HTTPS traffic to a WSA for SSL inspection. The WSA is on the same subnet as the router. The engineer configures a dynamic service group for TCP port 443. What redirection mode should be used?
Select an answer first
29application · medium
An organization has two WSAs in the same data center to provide redundancy for web filtering. They want to configure WCCP on the router so that if one WSA fails, the other automatically takes over the redirected traffic. What must be configured on the router to achieve this?
Select an answer first
30application · medium
A network administrator is configuring WCCP on a router that is directly connected to a WSA via a switch. The WSA is on the same VLAN as the router's interface. The administrator wants to minimize overhead and avoid encapsulation. Which redirection mode should be used?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCIE-SECURITY

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-SECURITY” is a trademark of its owner, used for identification only.

5.6 WCCP Redirection on Cisco Devices CCIE-SECURITY Practice Questions (Page 6)

Questions 26–30

A company is running WCCPv1 on their routers and wants to upgrade to WCCPv2 to support multiple routers and better load balancing. They have a single router and two WSAs. What is the primary benefit of upgrading to WCCPv2 in this scenario?

A network engineer needs to redirect HTTPS traffic to a WSA for SSL inspection. The WSA is on the same subnet as the router. The engineer configures a dynamic service group for TCP port 443. What redirection mode should be used?

An organization has two WSAs in the same data center to provide redundancy for web filtering. They want to configure WCCP on the router so that if one WSA fails, the other automatically takes over the redirected traffic. What must be configured on the router to achieve this?

A network administrator is configuring WCCP on a router that is directly connected to a WSA via a switch. The WSA is on the same VLAN as the router's interface. The administrator wants to minimize overhead and avoid encapsulation. Which redirection mode should be used?

Keep studying — 5.0 Advanced Threat Protection and Content Security