300-445 Question 20
Select 4You are designing a network assurance solution for a large enterprise with multiple branch offices and a central data center. Your goal is to monitor traffic, detect anomalies, and ensure compliance with security policies without overloading the network or compromising sensitive data. Where should you deploy network assurance agents to meet these requirements?
- A
At the central data center to monitor aggregated traffic from all branches
- B
At each branch office to monitor local traffic and detect anomalies close to the source
- C
On end-user devices to capture user-specific traffic and enforce policies
- D
At the internet edge to monitor external traffic entering and leaving the network
- E
On cloud-hosted virtual machines to monitor applications hosted in the cloud
Show answer and explanation
Correct answers: A, B, D, E
Explanation
Proper agent placement is critical to achieving comprehensive network assurance and security. Agents should be deployed strategically to monitor key traffic points, including the central data center, branch offices, internet edge, and cloud environments. This ensures anomalies are detected early, compliance is enforced, and network performance is optimized. However, deploying agents on end-user devices is typically not recommended due to privacy and scalability concerns.
- A. Correct.
Deploying agents at the central data center allows monitoring of aggregated traffic, helping to identify global trends and issues affecting the entire network.
- B. Correct.
Deploying agents at each branch office enables localized monitoring, which can detect anomalies and security issues specific to that location with minimal latency.
- C. Incorrect.
Deploying agents on end-user devices is not ideal for enterprise-wide network assurance, as it introduces overhead and privacy concerns while not providing a comprehensive view of network traffic.
- D. Correct.
Deploying agents at the internet edge helps to monitor external traffic, ensuring security policies are enforced at the ingress and egress points of the network.
- E. Correct.
Deploying agents on cloud-hosted virtual machines is essential for monitoring and securing workloads and applications in the cloud environment.