Utilizing network scanning tools to probe both on-premises and cloud-based IP ranges provides a full picture of the organization's edge, uncovering any services exposed to the external environment. DNS footprinting alone would only provide information related to domain names and records but would not necessarily map all exposed services. Similarly, running a vulnerability assessment on the on-premises environment specifically disregards cloud services, which is a part of the hybrid infrastructure. Embedding agents into cloud services may offer ongoing monitoring but is not a substitute for an active edge discovery scan.