Reconnaissance in cyber operations is the process of collecting information about a target before an attack.

• A. It is used to exploit vulnerabilities
• B. It is the process of collecting information about a target before an attack
• C. It is used to publish malware
• D. It is used to escalate privileges

Answer: (B)

Reconnaissance in cyber operations is about gathering information about a target before taking action. This step helps map the attack surface, identify entry points, assets, technologies in use, and even potential social engineering angles, so an attacker can plan effectively. The best answer reflects this by defining reconnaissance as the process of collecting information about a target prior to an attack. The other activities—exploiting vulnerabilities, publishing malware, and escalating privileges—are actions that occur after information gathering to breach, propagate, or gain higher access, not the information-gathering phase itself. Reconnaissance can be passive (observing public data like domain records and websites) or active (interacting with systems to learn about open ports or services), but the core idea is gathering intelligence before proceeding.