Question 1
A security analyst is reviewing a recent breach where an attacker quietly gathered employee email addresses and organizational charts from public social media profiles before launching any technical attacks. Which stage of the Cyber Attack Lifecycle (Cyber Kill Chain) does this activity represent?
Answer and explanation
Correct answer: B
Reconnaissance is the first stage where the adversary identifies and selects targets, often using public information (OSINT) to map the organization's structure and personnel. Weaponization follows this stage.