300-445 Question 24
Select 4Your organization is deploying a network assurance solution to monitor and analyze traffic patterns for compliance and performance issues. The network consists of a mix of on-premises data centers, remote branch offices, and cloud-hosted workloads. To ensure comprehensive visibility while meeting security requirements, where should you deploy the network assurance agents?
- A
Within the on-premises core network to monitor internal traffic and ensure compliance.
- B
In the cloud-hosted environments where critical workloads are deployed to monitor east-west traffic.
- C
Within remote branch office networks to monitor traffic between branches and the main data center.
- D
At the internet edge of the on-premises network to capture inbound and outbound traffic for security analysis.
- E
Exclusively in the data center core network, as all traffic eventually passes through it.
Show answer and explanation
Correct answers: A, B, C, D
Explanation
To meet network assurance and security requirements, network assurance agents should be deployed in multiple locations, including the on-premises core network, cloud-hosted environments, remote branch offices, and the internet edge. This ensures comprehensive visibility and allows for monitoring of internal, east-west, and inbound/outbound traffic patterns. Deploying agents exclusively in one location, such as the data center core, would result in significant blind spots and compromise the effectiveness of the solution.
- A. Correct.
Correct. Deploying agents in the on-premises core network enables visibility into internal traffic and ensures compliance with internal security policies.
- B. Correct.
Correct. Deploying agents in cloud-hosted environments is essential to monitor east-west traffic between workloads, which is often missed by perimeter-based monitoring.
- C. Correct.
Correct. Deploying agents in remote branch offices ensures visibility into traffic patterns between branches and the main data center, which is critical for ensuring performance and security.
- D. Correct.
Correct. Deploying agents at the internet edge allows for capturing inbound and outbound traffic, which is vital for threat detection and compliance with security requirements.
- E. Incorrect.
Incorrect. While the data center core network is important, relying solely on this location would leave blind spots in remote branches, cloud-hosted workloads, and internet traffic.