Which of the following statements best describes how the collector agent learns that a user has
logged off from the network?

A.
The workstation fails to reply to the polls frequently done by the collector agent.

B.
The DC agent captures the log off event from the event logs, which it forwards to the collector agent.

C.
The work station notifies the DC agent that the user has logged off.

D.
The collector agent gets the logoff events when polling the respective domain controller.