To ensure that sensitive monitoring data does not travel across the public internet, a client canconfigure the monitoring instance and monitoring agents to only use private endpoints.

IBM Cloud Monitoring Private Endpoints: IBM Cloud Monitoring with Sysdig allows users to configure their monitoring instance and agents to communicate only over private endpoints. This configuration ensures that monitoring data remains within IBM’s private network, thus avoiding exposure to the public internet.

Private Endpoints for Data Security: Using private endpoints is crucial for clients who require that their sensitive data, such as monitoring metrics, never leave the secure IBM Cloud network, enhancing overall security.

References from IBM Cloud Professional Architect Materials:

IBM Cloud documentation on Configuring Private Endpoints for IBM Cloud Monitoring confirms that monitoring data can be restricted to private endpoints to avoid exposure to the public internet.

Other options are incorrect:

A. Encrypt all monitoring data with a user-controlled key from Key Protect or Hyper Protect Crypto Servicesdoes not prevent data from traveling across the public internet.

C. Ensure that all resources being monitored are in the same region as the IBM Cloud monitoring instanceis a good practice for performance but does not specifically ensure that data doesn’t travel over the public internet.

D. Use only private endpoints to store monitoring data in IBM Cloud Object Storageis related to storage, not monitoring data transmission.

Therefore, the correct answer isB. Configure the monitoring instance and monitoring agents to only use private endpoints.

=================