A client has hired your company to conduct a penetration test against their production servers. Which of the following risks to the computer systems of your client is the most important for them to understand before a penetration test is allowed to start?
1) Shellcode might be uploaded
2) Mandatory downtime requirement
3) System stability might be impacted
4) Limitation of liability