Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS) — Question 198

How does agentless monitoring differ from agent-based monitoring?

Answer options

• A. Agentless can access the data via API, while agent-based uses a less efficient method and accesses log data through WMI.
• B. Agent-based monitoring has a lower initial cost for deployment, while agentless requires resource-intensive deployment.
• C. Agent-based monitoring is less intrusive in gathering log data, while agentless requires open ports to fetch the logs.
• D. Agent-based has a possibility to locally filter and transmit only valuable data, while agentless has much higher network utilization.

Correct answer: D

Explanation

The correct answer is D because agent-based monitoring can filter data locally, reducing unnecessary network load, while agentless monitoring often results in higher network utilization due to its method of data collection. Options A, B, and C are inaccurate as they misrepresent the characteristics and efficiency of data retrieval methods used by both monitoring types.