Which of the following is the MOST important consideration when establishing vulnerability scanning on critical IT infrastructure?

While cost-effectiveness is always a consideration, it is secondary to maintaining the operational integrity of critical systems during scanning.

Performing scans during non-peak hours helps mitigate potential performance impacts, but the most important consideration is preventing degradation altogether, regardless of the time, especially if critical systems must operate 24/7.

Penetration testing typically follows vulnerability scanning for a more in-depth assessment, but it's a subsequent step, not the most important consideration for establishing the initial scanning process itself.

Critical IT infrastructure is defined by its importance to business operations, meaning system availability and performance are usually top priorities. Vulnerability scans, especially deep or extensive ones, can consume significant system resources, potentially leading to performance degradation or service disruption; therefore, ensuring the scanning is non-intrusive and does not degrade system performance is crucial to avoid unintended operational impact.