300-445 Question 19
Select 4You are tasked with deploying network assurance agents across an enterprise network to monitor performance and ensure compliance with security policies. The network consists of a data center, branch offices, and remote users connected through a VPN. Which of the following locations should you choose to meet both network assurance and security requirements?
- A
Deploy agents on core switches in the data center to monitor internal traffic and ensure compliance.
- B
Deploy agents on branch office routers to monitor WAN link performance and detect anomalies.
- C
Deploy agents on user endpoints for direct monitoring of individual device traffic.
- D
Deploy agents on VPN concentrators to monitor remote user traffic and enforce security policies.
- E
Deploy agents on internet gateway firewalls to monitor external traffic entering or leaving the network.
Show answer and explanation
Correct answers: A, B, D, E
Explanation
To meet both network assurance and security requirements, agents should be deployed at strategic points where they can provide visibility into key traffic flows. Core switches monitor internal traffic, branch routers monitor WAN links, VPN concentrators monitor remote access, and internet gateways monitor north-south traffic. Deploying agents on user endpoints is not feasible for enterprise-wide monitoring.
- A. Correct.
Correct. Deploying agents on core switches in the data center provides visibility into east-west traffic and helps ensure compliance with internal security policies.
- B. Correct.
Correct. Deploying agents on branch office routers allows monitoring of WAN link performance, which is critical for ensuring reliable connectivity and detecting anomalies at remote sites.
- C. Incorrect.
Incorrect. While monitoring individual devices might provide granular visibility, this approach is not scalable or practical for an enterprise network assurance strategy.
- D. Correct.
Correct. Deploying agents on VPN concentrators helps monitor remote user traffic, enforce security policies, and detect potential threats from remote connections.
- E. Correct.
Correct. Deploying agents on internet gateway firewalls provides visibility into north-south traffic and can help detect external threats and ensure compliance with network security policies.