Which of the following statements about reconnaissance is true?

A DNS zone transfer (AXFR request) is a reconnaissance technique where an attacker queries a DNS server to obtain a full copy of its zone data, exposing hostnames, IP addresses, and network topology. This information gathering step is a classic reconnaissance method used to plan further attacks against a target.

That description defines a honeypot - a decoy system intentionally deployed to lure and monitor attackers - not a statement about reconnaissance.

That description defines a backdoor or remote access trojan, which provides covert unauthorized remote access to a compromised system.

Half-open scanning (SYN scanning) is a specific port scanning method that sends SYN packets without completing the TCP handshake, and is a sub-technique within reconnaissance, not a definition of reconnaissance itself.