300-445 Question 17
Select 3An enterprise network spans multiple branch offices connected via a hybrid WAN architecture. To implement network assurance and meet security requirements, where should you deploy network assurance agents to effectively monitor traffic and detect potential threats without compromising performance?
- A
Deploy agents on all branch office routers and WAN edge devices.
- B
Deploy agents only at the data center core switches.
- C
Deploy agents on branch office routers and at key aggregation points in the network.
- D
Deploy agents on end-user devices to monitor traffic directly from user endpoints.
- E
Deploy agents at internet-facing firewalls and WAN edge devices.
Show answer and explanation
Correct answers: A, C, E
Explanation
To meet network assurance and security requirements in a hybrid WAN architecture, agents should be strategically deployed at locations that provide comprehensive visibility into traffic flows while maintaining performance. Deploying agents on branch office routers, WAN edge devices, and internet-facing firewalls ensures coverage of branch-specific, aggregated, and external traffic. Core switches alone cannot provide sufficient visibility, and deploying on end-user devices is not scalable.
- A. Correct.
Deploying agents on all branch office routers and WAN edge devices ensures visibility into WAN traffic and branch-specific traffic patterns, which is critical for network assurance and identifying localized issues.
- B. Incorrect.
Deploying agents only at the data center core switches provides limited visibility and does not account for branch office or edge traffic, leading to gaps in monitoring and assurance.
- C. Correct.
Deploying agents on branch office routers and key aggregation points provides a balance of visibility and resource efficiency, ensuring both branch-level and aggregated network traffic are monitored effectively.
- D. Incorrect.
Deploying agents directly on end-user devices is not scalable for enterprise networks and may introduce performance overhead on individual devices, making it impractical.
- E. Correct.
Deploying agents at internet-facing firewalls and WAN edge devices ensures visibility into external traffic flows and potential security threats at critical ingress/egress points.