In a penetration test, the initial phase focuses on documenting the target's current state to learn as much as possible.

In a penetration test, the initial phase focuses on documenting the target's current state to learn as much as possible.

• A. Reconnaissance and information gathering
• B. Exploitation
• C. Post-exploitation
• D. Reporting

Answer: (A)

Reconnaissance and information gathering is the opening phase of a penetration test. The goal here is to learn as much as possible about the target by collecting details about its systems, networks, services, and public exposure. This includes mapping what assets exist, how they’re connected, what software and versions are running, and any public-facing data that could reveal weaknesses. By assembling this information, testers create an accurate picture of the attack surface and prioritize where to focus next. The other stages come later: exploitation involves trying to take advantage of discovered weaknesses to gain access; post-exploitation deals with actions after access is obtained; reporting captures and communicates the findings.

Reconnaissance and information gathering is the opening phase of a penetration test. The goal here is to learn as much as possible about the target by collecting details about its systems, networks, services, and public exposure. This includes mapping what assets exist, how they’re connected, what software and versions are running, and any public-facing data that could reveal weaknesses. By assembling this information, testers create an accurate picture of the attack surface and prioritize where to focus next. The other stages come later: exploitation involves trying to take advantage of discovered weaknesses to gain access; post-exploitation deals with actions after access is obtained; reporting captures and communicates the findings.