Missions in response to adversary activity or threats correspond to which term?

Missions in response to adversary activity or threats correspond to which term?

• A. Reconnaissance / Strike Coordination & Reconnaissance and Recover
• B. Secure and Protect
• C. Threat Emulation and Continuous Validation Assessment
• D. Legacy and Current Mission Types

Answer: (A)

When defending against adversary activity, the missions are about understanding the threat, coordinating a swift and effective response, and restoring operations. Reconnaissance provides the information you need to understand attacker capabilities, techniques, and intent, which is essential for informed decision-making. Strike Coordination ensures actions across teams and systems are synchronized, so responses are efficient, targeted, and minimize collateral impact. Recover focuses on bringing services back online and strengthening resilience after an incident. Taken together, these elements—gathering threat intelligence, coordinating the response, and restoring operations—best describe missions in response to adversary activity, which is why this term is the best fit. The other options either describe general security posture or separate testing/assessment activities, not the active response to threat activity.

When defending against adversary activity, the missions are about understanding the threat, coordinating a swift and effective response, and restoring operations. Reconnaissance provides the information you need to understand attacker capabilities, techniques, and intent, which is essential for informed decision-making. Strike Coordination ensures actions across teams and systems are synchronized, so responses are efficient, targeted, and minimize collateral impact. Recover focuses on bringing services back online and strengthening resilience after an incident. Taken together, these elements—gathering threat intelligence, coordinating the response, and restoring operations—best describe missions in response to adversary activity, which is why this term is the best fit. The other options either describe general security posture or separate testing/assessment activities, not the active response to threat activity.