Scan a known safe target to verify your tools work - Confirm that your scanning traffic appears in the client's logs (have the client verify) - Run a quick connectivity test to all in-scope targets