Which flag would you use to perform a comprehensive scan including OS detection, script scanning, version detection, and traceroute?

• A. -A
• B. -O
• C. -D
• D. -F

Answer: (A)

The option to use is the aggressive mode that bundles several capabilities into one command. It enables OS detection, version detection, script scanning, and traceroute all at once, giving you a broad fingerprint and deeper insight in a single pass. OS detection analyzes the target’s responses to fingerprint the operating system. Version detection probes services to determine running software and versions. Script scanning runs the Nmap Scripting Engine to check for vulnerabilities, misconfigurations, and useful information beyond simple port checks. Traceroute shows the network path to the host. This combination is exactly what you’re looking for when you want a comprehensive scan.

The other flags are more limited: OS detection alone tells you the OS but not the service versions or scripts; decoy mode just makes the scan appear to come from more than one source; a fast scan focuses on fewer ports and skips deeper checks. So the flag that best fits a full, all-in-one sweep is the aggressive option.