A client has scheduled a wireless penetration test. Which of the following describes the scoping target information MOST likely needed before testing can begin?

Physical location and ESSIDs help define geographic scope, but ESSIDs can be discovered via passive reconnaissance during the test itself and are not strictly required before testing begins.

The number of wireless devices owned by the client defines asset inventory, not the technical attack surface or required testing equipment configuration.

The access point vendor is irrelevant to scoping because the tester attacks standard wireless protocols such as 802.11, not vendor-proprietary mechanisms.

The specific bands (2.4 GHz, 5 GHz, 6 GHz) and their channels directly determine what wireless network adapter hardware and antenna configurations the tester must bring to the engagement. Without this information upfront, the tester may arrive unable to capture or inject traffic on the client's actual wireless infrastructure.