A penetration tester was hired to test a web application. The penetration tester's Nmap scan is only targeting ports 80 and 443 even though other ports on the server are open. Which of the following…

While a limited scan might reduce costs, the primary reason for defining specific scan targets in a professional engagement is always adherence to the contractual scope, not simply cost reduction.

Scanning fewer ports naturally makes the scan run more quickly, but this is a desirable side effect rather than the fundamental professional reason for limiting the scan targets in a scoped engagement.

The tester's role is to test within scope, not to actively maintain confidentiality about services; if other services are out of scope, they should not be scanned at all, rather than attempting to conceal their existence from the client.

Penetration test engagements include a clearly defined scope that specifies which systems, applications, and services are authorized for testing; limiting the Nmap scan to ports 80 and 443 ensures adherence to this scope, reducing invasiveness and avoiding unauthorized testing of other services.