During an Introduction to Cyber Security exam, identifying attacker activity before major damage occurs is asking about which concept?

A. Error handling security B. Early detection C. Installation phase D. Command-and-control phase