Which sequence correctly represents the typical penetration testing workflow?

• A. Reconnaissance -> Scanning/Enumeration -> Vulnerability Identification -> Exploitation -> Post-Exploitation -> Reporting.
• B. Scanning/Enumeration -> Reconnaissance -> Exploitation
• C. Exploitation -> Reconnaissance -> Reporting
• D. Post-Exploitation -> Scanning/Enumeration

Answer: (A)

The sequence tested reflects how a penetration test is logically and ethically conducted: you start by gathering information about the target to build a knowledge base, then move to identifying live systems and open services through scanning and enumeration. With that context, you assess what vulnerabilities exist and could be exploited. Only after confirming a vulnerability with exploitation do you perform post-exploitation activities to explore deeper access, pivot, and gather evidence. Finally, all findings are documented in a report for remediation.

This flow makes sense because each step relies on the results of the previous one, and it avoids attempting to exploit or take action without understanding the target first. Starting with scanning without reconnaissance would lack context and could miss important targets; jumping straight to exploitation skips validation and is unsafe; starting with post-exploitation is impossible before gaining access.