During a packet capture review, a security analyst identifies the output below as suspicious: Which of the following best describes the type of activity the analyst has identified?

A ping sweep primarily uses ICMP echo requests to discover active hosts within a network range, resulting in a distinct pattern of many ICMP packets rather than sustained, periodic communication.

A port scan involves numerous connection attempts to different ports on a target to identify open services, creating a pattern of varied destination ports and connection attempts, unlike regular beaconing.

A DoS attack aims to exhaust system resources or bandwidth with an overwhelming flood of traffic, which is characterized by a massive increase in volume and rate, not by subtle, periodic communication.

Beaconing is a post-exploitation technique where a compromised host maintains stealthy, periodic communication with a command-and-control (C2) server. This typically manifests as consistent, often small data packets sent at regular intervals, distinct from the irregular patterns of scans or attacks.