A penetration tester is performing a remote scan to determine if the server farm is compliant with the company's software baseline. Which of the following should the penetration tester perform to…

A discovery scan identifies active hosts, open ports, and running services across the server farm through techniques like banner grabbing and port enumeration. This remote, unauthenticated approach provides the visibility needed to compare actual running software against the organization's approved baseline. It is the appropriate scan type when the goal is identifying what is present rather than performing deep authenticated configuration analysis.

A stealth scan is designed to avoid detection during reconnaissance and does not provide sufficient service enumeration detail for baseline compliance verification.

A full scan performs comprehensive vulnerability enumeration far beyond what is needed to simply verify software baseline compliance and is unnecessarily resource-intensive.

A credentialed scan requires providing authentication credentials to target systems and is used for deep configuration auditing, not a standard remote compliance check.