The purpose of reconnaissance in cyber operations is to gather information about the target to facilitate the attack.

• A. To patch known vulnerabilities
• B. To gather information about the target to facilitate the attack
• C. To monitor network performance
• D. To defend against intrusions

Answer: (B)

Reconnaissance is the information-gathering phase of cyber operations, focused on learning as much as possible about the target so the attacker can plan and tailor the attack. By collecting details such as reachable hosts, open services and ports, operating systems, versions, configurations, usernames, and potential weaknesses, the attacker builds a precise picture of what to exploit and how to evade defenses. This can involve passive methods like looking up public data, WHOIS records, and social engineering clues, as well as active methods such as port scans, OS fingerprinting, and banner grabbing. The goal is to assemble enough context to choose the most effective attack vectors and increase the likelihood of success.

Patching known vulnerabilities is about remediation and reducing risk, not gathering intelligence for an attack. Monitoring network performance is about maintaining operations and visibility, not planning intrusions. Defending against intrusions is a defensive activity aimed at preventing attacks. Therefore, gathering information about the target to facilitate the attack best matches the purpose of reconnaissance.