Answer is C. Host-based antivirus protection is another name for agent-based. Agent-based antivirus runs on each protected machine. Agentless antivirus protection scans hosts from a centralized system. Agentless systems have become popular in virtualized environments where multiple OS instances run on a host at the same time. Agent-based antivirus running in each virtualized system can seriously drain system resources. Agentless antivirus for virtual hosts uses a special security virtual appliance that performs optimized scanning tasks on the virtual hosts. VMware’s vShield is an example of this.

"B" is correct. According to NIST SP 800-40r3, enterprise patch management can use three typical deployment models: Agent based: This model uses an agent, which is software installed on the system that communicates with a patch management server. Agentless: This model includes one device that constantly scans the infrastructure and determines which host to patch. Passive network monitoring: This model uses network traffic monitoring to determine which version of the operating system a host is running. Keep in mind that "agent" is not antivirus or personal firewall. An agent's role is to comunicate to a centralized server and "obey" its orders.

Selected Answer: C The answer is C and here's why: The question asks what a "benefit" of agent-based over agentless is. BOTH systems use a central server to collate results, and if they didn't you would have to check every device to see what was happening. So "centralized admin" isn't a benefit. The benefit of agent-based protection is that devices will keep being protected even if they lose connection with the centralized server. Agentless devices will not be scanned if they lose connection with the server because agentless uses "push" technology to scan hosts. So for me, the benefit here is that devices are scanned locally and therefore stay protected at all times.

NO confusion... " Keep in mind that "agent" is not antivirus or personal firewall. Agent's role is to comunicate to a centralized server and "obey" its orders." So, B is correct

Selected Answer: C The correct answer is C. It collects and detects all traffic locally. Here's why the other options are incorrect: A. Agent-based protection can often lead to higher maintenance costs than agentless protection, since there are extra software components that need to be installed, updated, and managed on each device. B. While some centralized management platforms for agent-based protection may be available, this is not a direct benefit of using agent-based protection over agentless protection. D. Agent-based protection may let you manage numerous devices at the same time, but this is not a unique advantage over agentless protection, since many agentless solutions also have centralized management capabilities. So, the main advantage of agent-based protection over agentless protection is that it allows collection and detection of all traffic locally, which can lead to better performance, greater accuracy, and more complete security coverage. This is because the agent software runs directly on the device, letting it collect and analyze all traffic, including local and network traffic, without depending on any external systems.

Answer is C Agentless systems are built on push technology and a centralized design. A central authority scans the machines in the enterprise and initiates all actions on those machines. Agentless systems have several advantages over agent-based systems. Strict agent-based systems can only report on machines that have the agent actively running. If the agent has been disabled the machine will appear to not exist. In addition, new machines can be introduced to a network and these rogue machines will not only be agentless, they may also be invisible. Agentless systems, on the other hand, can scan ranges of IP addresses and report on the machines they find. Even if it cannot access the system, the agentless scanner will at least report that a new IP address is present on the network. In many cases agentless systems lower the cost of ownership, reduce management overhead, and make deployment quick and easy. This is especially true in large enterprises managing 10,000 or more machines. An administrator can be scanning and fixing their network within minutes using an agentless system.

Selected Answer: C The central platform is not a benefit (any system has it), local processing is.

Selected Answer: C it's C

Answer is C agent-based protection is installed locally why agentless are not..Agent-based scan and detect on the local device because it has been installed example is Host-based antivirus.. Agentless is not installed locally and it is centralized.. so the answer can not be B.

Selected Answer: B The question isn't asking for a definition, it is asking what the benefit is. Working in a large company, you'll realize that they always want to save money and simplify things. The word Agent is usually associated with local AV, it is associated with a centrally managed server which cuts costs and management overhead. The answer is B.

You do not need a central host since they can perform tasks independently: Once installed, the agent will run its set of actions on demand without needing to establish a connection to a server beforehand – even when it is disconnected from the enterprise network.

It's clearly not A or D, but otherwise both B and C are ambiguous answers.

I think the confusion is coming from the word antivirus, Santos's book never explains agent-based/agentless antivirus only agent-based/agentless protections and in detail, the patch management agent based/less which is different

under the centralized platform, I think the test creators meant patch repository, "The server acts as the patch repository and process orchestrator" I know it's not the sharpest answer, just don't overthink it!

Answer is C

Answer is D. A benefit of agent-based protection when compared to agentless protection is: D. It manages numerous devices at the same time. Agent-based protection allows for centralized management and control of security agents installed on individual devices. This centralized approach lets administrators manage and monitor multiple devices, often across different platforms and locations, from a single management console or platform. It simplifies the management of security policies, updates, and configurations for all protected devices, making it easier to ensure that security measures are consistently applied and up to date across the organization. In contrast, agentless protection typically relies on network-level security controls and may not provide the same level of centralized device management and control. This can make it more difficult to manage a large number of devices and ensure uniform security policies and configurations across the network.

Answer is C

Selected Answer: B It provides a centralized platform

Selected Answer: B The benefit is that it gives a centralized platform! B~