Which Kill Chain stage is performed to collect as much information about the target as possible before attacking?

Which Kill Chain stage is performed to collect as much information about the target as possible before attacking?

• A. Reconnaissance
• B. Delivery
• C. Exploitation
• D. Command and Control

Answer: (A)

Reconnaissance is the phase focused on gathering as much information as possible about the target before any attack. The goal is to map the environment, assets, and potential weaknesses by collecting data from public sources, infrastructure details, domain and IP information, personnel contacts, and related relationships. This intel helps shape the attacker’s plan, choose the most effective entry points, and anticipate defenses. Delivery, exploitation, and command and control come after reconnaissance. Delivery is getting the weaponized payload to the target, exploitation is breaking in by taking advantage of a vulnerability, and command and control is establishing ongoing control once access is gained. None of these steps are primarily about information gathering, which is why reconnaissance is the best fit for the described scenario.

Reconnaissance is the phase focused on gathering as much information as possible about the target before any attack. The goal is to map the environment, assets, and potential weaknesses by collecting data from public sources, infrastructure details, domain and IP information, personnel contacts, and related relationships. This intel helps shape the attacker’s plan, choose the most effective entry points, and anticipate defenses.

Delivery, exploitation, and command and control come after reconnaissance. Delivery is getting the weaponized payload to the target, exploitation is breaking in by taking advantage of a vulnerability, and command and control is establishing ongoing control once access is gained. None of these steps are primarily about information gathering, which is why reconnaissance is the best fit for the described scenario.