A good penetration tester leverages low-hanging fruits, known vulnerabilities, and basic enumeration without being loud to avoid raising suspicion and gather insights on systems' normal patterns.