Jack is assessing the likelihood of reconnaissance activities against his organization, which is a small business. His first assignment is to determine the likelihood of port scans against his DMZ. How should he rate the likelihood of this happening?