Penetration testing involves three steps. At which step should an approve penetration test stop?

War Driving is a reconnaissance technique, and stopping there would not demonstrate successful penetration.

Network reconnaissance is the information gathering phase; stopping here would not demonstrate system vulnerabilities or penetration.

An approved penetration test typically aims to demonstrate the successful exploitation of vulnerabilities and gain network penetration, stopping before causing actual harm or extended disruption to the target system.

System control implies maintaining persistent access and potentially escalating privileges, which might exceed the scope of what is permitted in a typical approved penetration test's stopping point without explicit authorization.

Denial of system services would be a destructive action and is generally not an intended stopping point for an approved penetration test, which seeks to identify vulnerabilities without causing harm.

Network scanning is a part of reconnaissance, and stopping there would not demonstrate successful penetration.