Which phase of the ethical hacking cycle involves gathering information about the target?

Question

Options

• AReconnaissance
• BData Encryption
• CRisk Acceptance
• DServer Monitoring

• A
  93% (28)
• C
  3% (1)
• D
  3% (1)

Explanation

Reconnaissance is the first phase of the ethical hacking cycle, where an attacker (or ethical hacker) systematically collects information about a target - such as IP addresses, open ports, employee details, or system architecture - before attempting any attack. This intelligence-gathering phase is foundational because you can't exploit what you don't know.

Why the distractors are wrong:

• B. Data Encryption is a security control used to protect data confidentiality - it's not a hacking phase at all.
• C. Risk Acceptance is a risk management strategy where an organization decides to tolerate a known risk rather than mitigate it - unrelated to active hacking phases.
• D. Server Monitoring is a defensive/operational activity for detecting anomalies, not a phase in an offensive hacking methodology.

Memory tip: Think of reconnaissance as "recon" - like a spy scoping out a location before a mission. It always comes first because you gather intel before you act. The phrase "Recon = Research" can help cement the association.

No community discussion yet for this question.