Which phase of penetration testing involves gathering information about target systems?
- Exploitation
- Reconnaissance
- Reporting
- Post-Exploitation
Answer: Reconnaissance
Reconnaissance (information gathering) is first phase of pentest: passive (OSINT, WHOIS) and active (scanning, enumeration) techniques to map target attack surface. Followed by scanning, exploitation, post-exploitation, and reporting. Critical for cybersecurity methodology questions.