The ZDTA study guide frames common breaches around a four-step lifecycle: discover the attack surface, compromise an entry point, move laterally, and exfiltrate data. Finding the attack surface is the reconnaissance phase in which attackers search for exposed VPNs, firewalls, applications, ports, or public services. Option B (Prevent Compromise) is correct because attack-surface discovery is one of the documented stages.

Why the other options are incorrect:

A. External Attack Surface: Attack surface is the set of exposed services, addresses, applications, and entry points an attacker can discover.

C. Data Loss: Data Loss is a Risk360 risk area. The four cyberattack steps in the guide are attack surface, initial compromise, lateral movement, and data exfiltration.

D. Lateral Propagation: Lateral propagation is a Risk360/risk concept. The attack-lifecycle step named in the guide is lateral movement.