Which of the following is a technique used as part one of the set-up?

• A. Selecting a victim
• B. Observation
• C. Testing the limits or phishing
• D. All of the above

Answer: (B)

Observation is the initial reconnaissance step used to learn about the environment, people’s routines, and security controls without drawing attention. This passive gathering of information provides crucial situational awareness, helping to understand when and how to act later. From this understanding, you can identify a target or pattern to exploit; without first observing, selecting a victim would be guesswork and riskier. Active attempts like testing boundaries or phishing come after you’ve collected enough context to plan an effective approach, making them later steps rather than part one. So observation best fits the first phase because it lays the groundwork and informs all subsequent actions.