Which term describes traffic signatures indicating an attempt to gain information?

Which term describes traffic signatures indicating an attempt to gain information?

• A. Proactive
• B. Informational
• C. Unauthorized Access
• D. Reconnaissance

Answer: (C)

The idea being tested is recognizing activity that signals someone is trying to learn about a system rather than break into it. When you see traffic that looks like scanning ports, identifying services, or gathering details about hosts and configurations, it’s reconnaissance. This phase is all about information gathering to map out the target before any intrusion attempt. It’s different from unauthorized access, which would mean actually breaking in or bypassing security controls, and from terms that describe data itself rather than the probing intent. Detecting reconnaissance helps defenders respond early—block or throttle scans, validate exposed services, and raise alerts—because these signals show an attacker preparing to gain information about the environment.

The idea being tested is recognizing activity that signals someone is trying to learn about a system rather than break into it. When you see traffic that looks like scanning ports, identifying services, or gathering details about hosts and configurations, it’s reconnaissance. This phase is all about information gathering to map out the target before any intrusion attempt. It’s different from unauthorized access, which would mean actually breaking in or bypassing security controls, and from terms that describe data itself rather than the probing intent. Detecting reconnaissance helps defenders respond early—block or throttle scans, validate exposed services, and raise alerts—because these signals show an attacker preparing to gain information about the environment.