156-536 · Question #82
You're going to prepare a Deployment Scenario of an Endpoint Security Client on a Windows machine in an On-Prem environment. You choose one of two basic deployments - which is typical for a local…
The correct answer is B. Agent (Initial Client) and Software Blades packages. In a typical local deployment in an On-Prem environment, both the Agent (Initial Client) and the Software Blades packages are deployed. The Agent package is necessary to install the endpoint client, and the Software Blades package includes the security features (such as…
Question
You're going to prepare a Deployment Scenario of an Endpoint Security Client on a Windows machine in an On-Prem environment. You choose one of two basic deployments - which is typical for a local deployment?
Options
- AAgent (Initial Client) package only
- BAgent (Initial Client) and Software Blades packages
- CAgent-less (no Client) and Software Blades packages
- DAgent (free Client) package only
How the community answered
(52 responses)- A2% (1)
- B92% (48)
- C2% (1)
- D4% (2)
Explanation
In a typical local deployment in an On-Prem environment, both the Agent (Initial Client) and the Software Blades packages are deployed. The Agent package is necessary to install the endpoint client, and the Software Blades package includes the security features (such as Anti-Malware, Encryption, etc.) that you want to enable on the client. This deployment allows the endpoint to function with full security capabilities.
Topics
Community Discussion
9
Samuel O.Jun 26, 2026For a local on-prem deployment, the answer is B, Agent (Initial Client) and Software Blades packages, because the Initial Client alone just lays down the framework, and the Software Blades are what actually deliver the security functionality you need, whether that is Anti-Malware, Firewall, or whatever policies your admin is pushing out. Deploying both together is the standard full deployment you would do when you have the infrastructure to host the packages internally and want full protection from day one.
Orla P.Jun 29, 2026Right on the mechanics, though if you see a question stem that says "minimal footprint" or "staged rollout," they may be fishing for just the Initial Client first, so read for that qualifier before locking in both packages.
Nina C.Jun 26, 2026I almost picked A, but blades don't install themselves, so B makes sense.
Toby R.Jun 28, 2026Right, though worth keeping in mind that on some vendor OEM images the controller driver ships pre-loaded so the HBA itself is detected and firmware can still be updated even before you explicitly install the driver package, which tripped me up on a question about staged installs.
Orla P.Jun 26, 2026The "Agent only" option in A trips people up because it sounds like a complete deployment, but an initial client by itself does not give you the actual protection features you need on the endpoint. For a local on-prem deployment you need both the agent and the Software Blades packages together, so B is the one to mark.
Nina C.Jun 29, 2026Right, and the way I remember it is that the agent is basically just the container, so without the Software Blades activated on top of it you have something installed but nothing actually enforcing policy, which is exactly the kind of gap the exam loves to test.
Toby R.Jun 26, 2026B is right. Local on-prem deployments ship both the Agent package and the Software Blades packages together because the blades carry the actual security functionality, so without them the client is just a shell with nothing to enforce.
Samuel O.Jun 29, 2026Right, and worth adding for the exam specifically, even though the blades ride along in that same package, each one still needs its own license to activate, so "deployed" and "enforcing" are two different states that the test loves to exploit in its wrong answers.
Luis F.Jun 26, 2026B is right, local deployment needs both the Agent and Software Blades packages together.