A penetration tester gains initial access to a system and gets ready to perform additional...

When Nmap is unavailable on a compromised host, PenTest+ expects testers to adapt by using native scripting (for example, PowerShell) to perform reconnaissance and port checks with built-in .NET classes such as System.Net.Sockets.TcpClient. To scan multiple ports, the script must iterate over two dimensions: the host range and the port list. In PowerShell, supplying a comma-separated list to a variable (for example, $port = 80,443,445) creates an array-like collection. The correct way to use that collection is to add a nested Foreach loop inside the existing loop that iterates through IPs, so each reachable host is tested against every port in the list.

Duplicating the socket block (A) is inefficient, error-prone, and does not scale as the number of ports grows. Option C is not the correct syntax for combining two enumerations in a single Foreach header; PowerShell requires a separate loop (or pipeline) to iterate ports. Therefore, adding a second Foreach directly beneath the current one and enclosing the socket logic within it best achieves the intended multi-port scanning behavior.