A penetration tester is performing a vulnerability scan on a large ATM network. One of the organization's requirements is that the scan does not affect legitimate clients' usage of the ATMs. Which…

The Nmap -T2 (Polite) timing template significantly slows down the scan by increasing the delay between probes and waiting longer for responses, thereby reducing the network and CPU load on target systems. This ensures minimal impact on the operational availability and performance of the ATM network, meeting the requirement to not affect legitimate client usage.

Running scans with multiple machines would likely increase the overall network traffic and resource consumption on the target ATMs, potentially exacerbating the risk of service disruption.

Running scans only during lunch hours is a scheduling consideration, but it doesn't guarantee the scan won't affect legitimate users who might still be using ATMs during that time, nor does it inherently reduce the scan's impact.

Using Nmap's -host-timeout switch would skip unresponsive targets, which might speed up the scan or prevent it from hanging, but it does not inherently reduce the impact of the scan on responsive, active targets.