Which evasion method involves performing actions slower than normal to prevent detection?

Traffic fragmentation is an evasion method that splits packets into smaller fragments to bypass deep packet inspection, which is unrelated to slowing down the rate of actions.

Tunneling encapsulates malicious traffic inside legitimate protocols such as DNS or HTTPS to evade detection, not by altering the timing of actions.

Timing attacks, also called low-and-slow attacks, involve spreading malicious activity such as port scans, brute-force attempts, or data exfiltration over an extended period at a reduced rate. By operating below the threshold that signature-based or anomaly-based detection systems use to trigger alerts, the attacker avoids detection. This is distinct from other evasion methods because the core mechanism is manipulation of the rate and timing of actions rather than the structure of the traffic.

Resource exhaustion involves overwhelming a system's resources such as CPU, memory, or bandwidth, which is typically associated with denial-of-service attacks rather than stealthy evasion.