Which stage of the kill chain used by attackers focuses on the identification and selection of targets?

• A. Reconnaissance
• B. Delivery
• C. Exploitation
• D. Installation

Answer: (A)

The stage focused on identifying and selecting targets is reconnaissance. In this phase, the attacker gathers information about potential victims—networks, systems, users, defenses, and vulnerabilities—to decide which targets offer the best opportunity. It involves collecting data (often via OSINT, network mapping, and vulnerability spotting) to understand the landscape and determine who to attack and how to approach it. The subsequent stages, such as delivery, exploitation, and installation, are about actually reaching and compromising a chosen target, not about choosing targets.