When performing active reconnaissance, a malicious actor may try to do which of the following?

Question $74$ options:

Deploy malware

Do nothing; only penetration testers use active reconnaissance

Use phishing emails

Work at peak hours to blend in