Which of the following statements describe WMI polling mode for FSSO collector agent? (Choose two.)

Which of the following statements describe WMI polling mode for FSSO collector agent? (Choose two.)
A . The collector agent does not need to search any security event logs.
B . WMI polling can increase bandwidth usage with large networks.
C . The NetSessionEnum function is used to track user logoffs.
D . The collector agent uses a Windows API to query DCs for user logins.

Answer: B,D