Which of the following correctly pairs an NSE script category with a typical use?

• A. Discovery: host discovery; Safe: non-intrusive checks like http-title; Intrusive: vulnerability checks; Brute-force is another category used for credential guessing.
• B. Brute-force is another NSE script category used for credential guessing.
• C. Discovery: host discovery; Safe: vulnerability checks; Intrusive: OS fingerprinting; Brute-force: port scanning
• D. Discovery: DNS resolution; Safe: port scanning; Intrusive: banner grabbing; Brute-force

Answer: (B)

In NSE, scripts are grouped by their intent, and the brute-force category is specifically designed for trying many username/password combinations to test or gain access, which is credential guessing. That makes the statement about brute-force being a category used for credential guessing the correct pairing: it directly reflects what those scripts do and why they exist.

Understanding this helps when you see other NSE scripts labeled as discovery, safe, or intrusive. Discovery scripts focus on finding hosts and services, safe scripts aim to perform non-destructive checks, and intrusive scripts cover more riskier probing like vulnerability checks. Brute-force scripts sit apart because their purpose is to test credentials, which can affect access controls and is inherently more aggressive than typical discovery or passive checks.