During a review to approve a penetration test plan, which of the following should be an information security manager’s PRIMARY concern?

A. Penetration test team’s deviation from scope
B. Unauthorized access to administrative utilities
C. False positive alarms to operations staff
D. Impact on production systems