Which of the following penetration testing phases involves gathering data from whois, DNS, and network scanning, which helps in mapping a target network and provides valuable information regarding…

The post-attack phase covers cleanup, report generation, and restoring systems to their original state after exploitation has already occurred.

'On-attack phase' is not a standard penetration testing phase in recognized frameworks; reconnaissance precedes active exploitation.

The attack phase involves the actual exploitation of discovered vulnerabilities, not the preliminary data-gathering activities described in the question.

The pre-attack phase encompasses all reconnaissance and information-gathering activities performed before an actual exploitation attempt begins. Techniques such as whois queries, DNS zone transfers, and network scanning tools like Nmap are used during this phase to identify live hosts, open ports, operating systems, and running services. This intelligence forms the foundation for planning the subsequent attack phase.