A penetration tester is configuring a vulnerability management solution to perform a scan of Linux servers on an enterprise network. The client wants to reduce potential disruptions as much as possibl

A read-only user account grants access only to view system configurations, files, and services, allowing the vulnerability scanner to collect necessary information without the ability to modify or disrupt the system. This approach adheres to the principle of least privilege, reducing the risk of unintended changes or service interruptions during the scan.

SSH LDAP user refers to an authentication method, not a privilege level, and could still be configured with excessive permissions.

A domain administrator account has extensive privileges across the network, posing a significant risk of disruption or damage if compromised or misused during a scan.

An unprivileged user is too vague; while it implies low privilege, 'read-only' specifically defines the necessary access for non-disruptive scanning.