Which of the following statements describe WMI polling mode for FSSO collector agent? (Choose two.)

In WMI polling mode, the FSSO collector agent queries Domain Controllers directly using WMI methods to retrieve user login information, eliminating the need to search or parse security event logs.

While any polling mechanism can increase network bandwidth usage, this statement describes a potential consequence rather than a defining operational characteristic of how WMI polling functions compared to other FSSO modes.

The `NetSessionEnum` function is primarily used by FSSO to confirm active user sessions rather than explicitly tracking user logoffs, which are often inferred or handled by other mechanisms.

The FSSO collector agent in WMI polling mode leverages Windows Management Instrumentation (WMI), which is a set of Windows APIs, to query Domain Controllers for active user logon sessions.