Question

A company's security team recently discovered an unknown device connected to their network, and they suspect it could be a rogue device. The team wants to conduct scans and sweeps to locate and remove any unauthorized devices on the network.

Which of the following are common types of scans or sweeps the team can use to locate rogue devices in the network? (Select two.)

answer

Passive scanning


Network tap


Network mapping


Port scanning


Active scanning

Answer 1

Passive scanning and Active scanning

- Passive scanning: monitors traffic (e.g., sniffing ARP/DHCP/Wi‑Fi beacons) to discover devices without sending probes.
- Active scanning: sends probes (ping/ARP sweeps, Nmap, etc.) to elicit responses and locate devices.