300-445 Question 22
Select 2An enterprise network spans multiple branch offices and a central data center. The organization is implementing a network assurance solution to monitor device performance, analyze traffic patterns, and detect anomalies. To meet security and operational requirements, the network assurance agents must minimize latency when collecting data and avoid exposing sensitive data to external threats. Where should the agents be deployed?
- A
On devices at each branch office to collect local data and send aggregated results securely to the central data center
- B
In the central data center to collect data from all branch offices and devices across the network
- C
On cloud-based infrastructure for scalability and to centralize data collection and analysis
- D
On network edge devices at each branch office to reduce data collection latency and maintain local traffic visibility
- E
On endpoint devices such as user laptops and smartphones for detailed user activity monitoring
Show answer and explanation
Correct answers: A, D
Explanation
To meet network assurance and security requirements, agents should be strategically placed where they can collect data with minimal latency and without exposing sensitive information unnecessarily. Deploying agents on branch office devices ensures local data collection, while using edge devices at each branch enhances traffic visibility and minimizes the risks of transmitting sensitive information over wide-area networks. Centralized or cloud-based deployments may introduce latency and security risks, and endpoint monitoring is inappropriate for network assurance purposes.
- A. Correct.
Correct: Deploying agents on devices at each branch office enables local data collection, reducing the impact of latency and ensuring only aggregated, non-sensitive data is sent to the central data center.
- B. Incorrect.
Incorrect: Collecting data solely in the central data center may introduce latency due to the need to transmit raw data over the WAN and could increase the risk of exposing sensitive data in transit.
- C. Incorrect.
Incorrect: Cloud-based infrastructure may offer scalability but could introduce compliance and security risks, especially if sensitive data is transmitted to a third-party system.
- D. Correct.
Correct: Deploying agents on network edge devices provides near real-time local traffic visibility and reduces the risk of exposing sensitive internal data by limiting what is sent to centralized systems.
- E. Incorrect.
Incorrect: Monitoring user endpoints for network assurance purposes is excessive and violates privacy considerations. Additionally, it is not relevant to network-level assurance.