The audit team was only provided the physical and logical addresses of the network without any type of access credentials. Which of the following methods should the audit team use to gain initial…

A tabletop exercise is a discussion-based planning and simulation activity that does not involve actively attempting to access live systems.

Social engineering techniques such as phishing, vishing, or pretexting allow the audit team to deceive employees into revealing credentials or granting access without any prior technical foothold, making it a primary initial access method in a no-credential scenario.

Runtime debugging requires existing access to a running application or process and cannot be used as a method to gain initial access to a system.

Reconnaissance involves gathering information about a target such as open ports, services, and topology - it is a precursor phase to gaining access, not an access method itself.

Code review is a static analysis technique that requires access to source code repositories and cannot be used to gain live system access.

A remote access tool - such as an exposed RDP service, SSH, VPN endpoint, or an implant delivered via social engineering - provides the mechanism for the audit team to connect to internal systems and maintain access once initial entry is established.