A penetration tester completes an authenticated vulnerability scan of a host and receives the following...

The correct answer is C. Running Metasploit utilizing the EternalBlue module

The scan results show TCP port 445 open, which indicates SMB is available. The host is also identified with partial confidence as Windows 7 SP0, an older Windows version historically associated with SMB vulnerabilities. EternalBlue targets SMBv1 and is known to be potentially unstable, especially against older or unpatched Windows systems. Exploiting SMB kernel-level vulnerabilities can cause system crashes or blue screens if the exploit fails or is not compatible with the target.

A is incorrect because Responder and Impacket are commonly used for SMB/NTLM relay or credential capture activities. They can be risky in some environments, but they are less likely than EternalBlue to directly crash a target when creating a session.

B is incorrect because Nmap safe scripts are designed to be non-intrusive. Targeting RDP with safe scripts is less likely to cause system instability.

D is incorrect because Hydra at one attempt per second is a slow password attack. It may trigger account lockout depending on policy, but it is not the most likely option to create host stability issues.

In PenTest+ terms, this falls under Attacks and Exploits, specifically exploit selection, exploit safety, and understanding the operational risk of using unstable exploits against production systems.