Which of the following is the FIRST step in an advanced persistent threat (APT) attack?

The first step in an APT attack is typically reconnaissance. Attackers need to understand the target organization's infrastructure, systems, and people before they can effectively plan and execute the attack. This involves collecting information about the organization's network, systems, applications, security controls, and employees. This reconnaissance phase is crucial for the attackers to identify vulnerabilities and entry points.

While social engineering (B) and password cracking (A) are common tactics used during an APT, they are not usually the first step.