Ryan is planning to conduct a vulnerability scan of a business$-$critical system using dangerous plug$-$ins. What would be the best approach for the initial scan?

Group of answer choices

A$.$ Run the scan against production systems to achieve the most realistic results possible.

B$.$ Run the scan during business hours.

D$.$ Do not run the scan to avoid disrupting the business.

C$.$ Run the scan in a test environment.