Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Implementing and Operating Cisco Security Core Technologies (SCOR) · Cisco
Select 2 answers.
This question asks for 2 answers, but our data marks only 1. Compare with the community discussion below for the full answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
I am sure about "D" as a the traffic is redirected on a L3 device with PBR (or similar solution). "A" would be fine without the word "only". The WSA is a full proxy, maintaining separate sessions btw. client - proxy and proxy - webserver. The source IP of the response is surely the ip of the proxy in the client-proxy connection with Explicit mode, when the client directly communicates with the proxy. However, I am not sure the redirected Transparent mode, as again the proxy is sitting in between the client and the webserver. I assume that the client does not get the response directly from the webserver, but rather from the proxy. So the source ip should be from the proxy (or does it spoof the source ip?).
Transparent means it has no L3 interface
Reference: CCNP And CCIE Security Core SCOR 350-701 Official Cert Guide-> Therefore in Transparent mode, WSA uses its own lP address to initiate a new connection the Web Server