Your supervisor wants to find missing or misconfigured security controls on a production network. Unfortunately, it has numerous critical services that are sensitive to excessive or non$-$standard traffic. Which of the following tests will be least intrusive while achieving your goal?

A Non$-$credentialed scan

E $$ Credentialed scan

C Configuration review

D Compliance scan