What is one of the four steps of a cyber attack?

The ZDTA study guide frames common breaches around a four-step lifecycle: discover the attack surface, compromise an entry point, move laterally, and exfiltrate data. Finding the attack surface is the reconnaissance phase in which attackers search for exposed VPNs, firewalls, applications, ports, or public services. Option D (Find Attack Surface) is correct because attack-surface discovery is one of the documented stages.

Why the other options are incorrect:

A. Find Cash Safe: That phrase describes a physical-world target, not a step in the cyberattack lifecycle.

B. Find Email Addresses: Email and webhooks forward alerts to people or third-party systems for response workflows.

C. Find Least Secure Office Building: That phrase describes a physical-world target, not a step in the cyberattack lifecycle.