Which reconnaissance task involves determining the identity of the agent?

• A. Detect
• B. Identify
• C. Quantify
• D. Collect

Answer: (B)

The task tested here is attribution—figuring out who performed the action. Determining the identity of the agent means you’re trying to map the reconnaissance activity to a specific actor or group. Detecting would only tell you that something happened or is present, not who did it. Quantifying focuses on measuring the extent or impact rather than identifying who acted. Collecting refers to gathering data, which supports analysis but doesn’t by itself name the actor. In practice, identifying the agent might involve analyzing tool signatures, timing, infrastructure, and patterns to match the activity to a known actor.