you need to perform a vulnerability scan as part of a gray box penetration test. the rules of engagement specify that the internal system administrators are not to receive any warning of when your scan will occur, that you are to avoid detection, and that your scan should gather as much information as possible. what should you do?