During which phase of a hacker's five-step approach does the hacker scan a network to identify IP hosts, open ports, and services enabled on servers and workstations?

Answer: Reconnaissance

Explanation:Reconnaissance is referred as the initial/primary phase in which the attacker / hacker puts the every effort to gain the knowledge about the target that is collecting facts about the DNS data, network records, IP address, range of IP etc.

It is the initial step done by the attackers to do the preparation of the hacking. It is done by the two phases that is active phase and the passive phase.