In passive scanning, what frames advertise the network's SSID to potential clients?

• A. Data frames from connected clients.
• B. Probes responses.
• C. Beacon frames listing the SSID.
• D. Authentication frames.

Answer: (C)

In passive scanning, you’re simply listening for signals being broadcast by access points. The frames that carry the network name (SSID) to anyone nearby are beacon frames. Access points periodically transmit beacon frames to announce their presence and capabilities, and the SSID is included in the beacon’s SSID parameter set so potential clients can identify the network without actively probing.

Data frames from connected clients aren’t used to advertise the network name; they carry actual user data once a device is associated. Probes responses deliver SSIDs only in the context of active scanning, where a client has sent a probe request and the AP replies. Authentication frames are part of the process to establish or secure a connection and don’t advertise the SSID.