350-401 Question 335
Select 3A network engineer is tasked with automating the configuration of multiple network devices in a large enterprise environment. The engineer is considering using an orchestration tool but is unsure whether to choose an agent-based or agentless solution. Which of the following considerations best describe the difference between agent-based and agentless tools like Chef, Puppet, Ansible, and SaltStack?
- A
Agent-based tools, like Chef and Puppet, require installing an agent on managed devices, which can add complexity to environments with strict security policies.
- B
Agentless tools, like Ansible, connect directly to managed devices over standard protocols (e.g., SSH), eliminating the need for software installation on the devices.
- C
Agent-based tools, like SaltStack and Ansible, operate without requiring direct access to the managed device, focusing instead on centralized control servers.
- D
Agentless tools, like Puppet and Chef, require minimal resource consumption on managed devices since they do not rely on running agents.
- E
Agent-based tools can perform tasks continuously without needing to establish a connection each time, whereas agentless tools connect on-demand to execute tasks.
Show answer and explanation
Correct answers: A, B, E
Explanation
Understanding the differences between agent-based and agentless orchestration tools is key to selecting the right solution for a given environment. Agent-based tools like Chef and Puppet rely on agents installed on managed devices, which can allow for continuous operation but add complexity in secure environments. Meanwhile, agentless tools like Ansible connect directly to devices using protocols like SSH, making them simpler to deploy and manage. Additionally, agent-based tools can operate without re-establishing connections, while agentless tools execute tasks on-demand.
- A. Correct.
Agent-based tools, such as Chef and Puppet, require agents to be installed on managed devices. This can add complexity in environments with strict security or compliance requirements, as additional software components must be managed and secured.
- B. Correct.
Agentless tools, such as Ansible, rely on standard protocols like SSH or WinRM to connect to managed devices directly. This eliminates the need for agent installation, simplifying the management process.
- C. Incorrect.
This statement is incorrect because SaltStack is an agent-based tool, and Ansible is an agentless tool. It misrepresents the categorization of these tools.
- D. Incorrect.
This statement is incorrect because Puppet and Chef are agent-based tools, not agentless, and require agents to run on managed devices. This contradicts the described behavior.
- E. Correct.
Agent-based tools maintain a persistent agent on the managed device, which can operate continuously. On the other hand, agentless tools, like Ansible, initiate connections on-demand to perform tasks, making this statement correct.