You have been contracted to map me network and try to compromise the servers for a client. Which of the following would be an example of scope creep' with respect to this penetration testing project?

Disclosing NDA-forbidden information is a legal and contractual breach, not scope creep - it violates the non-disclosure agreement terms rather than expanding the technical boundaries of the engagement.

The engagement was contracted specifically to map the network and attempt to compromise servers. Escalating privileges is a post-exploitation activity that was not included in the original written authorization, making it an unauthorized expansion of the engagement. Any activity beyond initial compromise - including privilege escalation, lateral movement, or data exfiltration - requires explicit written authorization to avoid legal liability and ethical violations.

Being asked by the client to compromise workstations represents a client-initiated scope change request, which is a formal expansion requiring a new authorization - not unauthorized scope creep by the tester.

Scanning slowly to avoid detection is a recognized and acceptable technique within network mapping engagements and does not exceed the agreed scope.