QuestionQ46

Analyze

Which option is an example of active endpoint classification?

  • A WMI scans
  • B DHCP fingerprinting
  • C MAC OUI based classification
  • D TCP fingerprinting
Explanation

WMI scans actively query a Windows endpoint for system information, making them an active endpoint-classification method. DHCP fingerprinting, MAC OUI classification, and TCP fingerprinting generally classify devices from passively observed attributes or traffic.

Community Discussion

No comments yet. Be the first to start the discussion!