Marco wants to conduct active reconnaissance of a target for a penetration test. Which of the following is an appropriate action based on this desire?

The only active reconnaissance task listed here is the nmap scan. Looking up information in Shodan, querying local DNS, and using public records are all examples of passive information gathering that does not actively probe the organization.