Which stage is primarily focused on gathering information and identifying weak points before launching an attack?

• A. Delivery
• B. Reconnaissance
• C. Installation
• D. Command and Control

Answer: (B)

Reconnaissance is the phase where an attacker gathers information about the target to map its environment and spot weaknesses before taking further steps. It involves collecting details like network ranges, exposed services, versions, and potential points of entry. This groundwork helps shape the attack plan by revealing where vulnerabilities exist and how to exploit them.

Delivery, by contrast, is about getting the exploit to the target. Installation focuses on establishing a foothold. Command and Control is about maintaining and managing access after compromise. The emphasis on gathering data and identifying weak points before action makes reconnaissance the best fit for this scenario.