A penetration tester needs to perform a vulnerability scan on a highly critical and fragile infrastructure system. Which of the following should the penetration tester do to minimize the risk?

Implementing query throttling involves limiting the rate at which scan requests are sent to the target system. This controlled approach reduces the load and stress on a fragile infrastructure, significantly lowering the risk of causing a denial of service, system crash, or other operational instability during the vulnerability scan.

Using high-bandwidth scanning techniques would significantly increase the load on a fragile system, directly escalating the risk of disruption and contradicting the goal of minimizing risk.

Enabling aggressive and indiscriminate scanning options involves sending a high volume of varied and potentially intrusive tests, which is highly likely to destabilize or crash a critical and fragile system.

While using a SYN flag (e.g., in a SYN scan) can be a stealthy port scanning technique to avoid full connection establishment, it does not inherently protect against the overall fragility of a system from being triggered by the *volume* or *type* of probes during a full vulnerability scan.