Which of the following is a risk of conducting a vulnerability assessment?

Conducting a vulnerability assessment can disrupt business operations because the scanning tools and techniques used may consume significant network bandwidth, overload systems, or even cause services to crash. This is especially true for unauthenticated or intrusive scans that simulate attacks. Unauthorized access to the system is a risk of a successful attack, not the assessment itself, which aims to prevent such access. Reports of false positives are a common outcome of vulnerability assessments, but they are a challenge in interpreting results, not a direct risk to operations. Finding security gaps is the purpose and benefit of a vulnerability assessment, not a risk.