SSDP scanning is primarily used for discovering devices on a network by multicast messaging for which protocol family?

• A. Discovering devices on a network using multicast for UPnP
• B. Enumerating DNS records
• C. Scanning for open ports
• D. Sniffing passwords

Answer: (A)

SSDP scanning is about discovering devices on a local network by multicast messaging as part of a larger system designed for automatic device discovery. This system is UPnP (Universal Plug and Play). SSDP operates within UPnP to locate devices and the services they offer by sending multicast queries and listening for responses, typically using UDP on the 1900 port to the multicast address 239.255.255.250. Devices reply with descriptions of themselves and their capabilities, enabling automatic discovery and interaction without manual configuration. That’s why this type of scanning is associated with discovering devices using multicast for UPnP. It isn’t about DNS records, it isn’t about probing ports, and it isn’t about capturing passwords.