Which type of traffic can a firewall use for proper classification and visibility of internet...

To properly classify and gain visibility intoInternet of Things (IoT) devices, a firewall can analyzeDHCP traffic, asIoT devices frequently use DHCP for network connectivity.

IoT Devices Often Use DHCP for IP Assignment–

Most IoT devices (smart cameras, sensors, medical devices, industrial controllers)dynamically obtain IP addressesviaDHCP.

Firewalls caninspect DHCP requests to identify device typesbased onDHCP Option 55 (Parameter Request List)andOption 60 (Vendor Class Identifier).

Enhances IoT Security with Granular Policies–

Palo Alto NetworksIoT Securityuses DHCP data toassign risk scores, enforce access control policies, and detect anomalies.

Does Not Require Deep Packet Inspection–

UnlikeRTP, RADIUS, or SSH, which focus onspecific protocols for media streaming, authentication, and encryption,DHCP data is lightweight and easily analyzed.

B. RTP (Real-Time Transport Protocol)❌

Incorrect, becauseRTP is used for media streaming (VoIP, video conferencing), notdevice classification.

C. RADIUS (Remote Authentication Dial-In User Service)❌

Incorrect, becauseRADIUS is an authentication protocol, nota traffic type used for IoT device classification.

D. SSH (Secure Shell)❌

Incorrect, becauseSSH is an encrypted protocolused forremote device access, notidentifying IoT devices.

Firewall Deployment– Firewallsuse DHCP fingerprinting for IoT visibility.

Security Policies– DHCP data enablesdynamic security policy enforcement for IoT devices.

VPN Configurations– EnsuresIoT devices using VPN connections are correctly classified.

Threat Prevention– Detectsmalicious IoT devices based on DHCP metadata.

WildFire Integration– PreventsIoT devices from being used in botnet attacks.

Zero Trust Architectures– Ensuresleast-privilege access policies for IoT devices.

Why DHCP is the Correct Answer?Why Other Options Are Incorrect?References to Firewall Deployment and Security Features: