200-201 Question 9
Single answerA cybersecurity analyst is tasked with implementing endpoint protection for a company's devices. The analyst is deciding between agent-based and agentless approaches. Which of the following scenarios best aligns with using an agentless protection approach?
- A
The company needs to monitor network traffic for threats without installing software on endpoints.
- B
The company requires a solution capable of performing detailed behavioral analysis on endpoint processes.
- C
The company needs to enforce endpoint compliance policies even when devices are offline.
- D
The company wants to use a lightweight solution that provides real-time remediation of endpoint security threats.
Show answer and explanation
Correct answer: A
Explanation
Agentless protection is ideal for scenarios where monitoring can be achieved by analyzing network traffic or external data sources without requiring software installation on endpoints. It is best suited for environments where minimal intrusion and easy deployment are priorities. In contrast, agent-based protections are needed for detailed analysis, offline policy enforcement, and real-time remediation, as they require direct interaction with the endpoint.
- A. Correct.
This is correct. Agentless protection monitors endpoints by analyzing network traffic and does not require software installation on individual devices.
- B. Incorrect.
This is incorrect. Detailed behavioral analysis on endpoint processes typically requires an agent installed on the device to collect and analyze data.
- C. Incorrect.
This is incorrect. Enforcing endpoint compliance policies when devices are offline often requires an agent to be installed and actively running on the endpoint.
- D. Incorrect.
This is incorrect. Real-time remediation of endpoint threats usually requires an agent to provide direct interaction with the endpoint.