Which statement best describes the relationship between reconnaissance and exploitation?

• A. Exploitation precedes reconnaissance
• B. Reconnaissance precedes exploitation
• C. They are unrelated
• D. They are the same

Answer: (B)

Reconnaissance is the information-gathering phase that comes before attempting to breach a target. It involves collecting details about the system—such as hosts, services, versions, and potential weaknesses—without triggering defenses in its passive form, or with limited probing in its active form. Exploitation uses that gathered information to target a vulnerability and gain access or escalate privileges. Because you need to know what exists and what might be vulnerable to tailor an attack, reconnaissance must come first. Trying to exploit without this knowledge is blind and unlikely to succeed, and the two activities are distinct steps in a sequence rather than unrelated or the same.