A security company has been contracted to perform a scoped insider-threat assessment to try to gain access to the human resources server that houses PII and sal...

A security company has been contracted to perform a scoped insider-threat assessment to try to gain access to the human resources server that houses PII and salary data. The penetration testers have been given an internal network starting position.
Which of the following actions, if performed, would be ethical within the scope of the assessment?