Which statement accurately describes the http-* category for NSE scripts?

• A. It runs a single script named http-*.
• B. It runs all NSE scripts in the http- category.
• C. It runs all NSE scripts containing 'http' anywhere.
• D. It runs all NSE scripts whose filenames begin with http-.

Answer: (D)

The test is about how NSE selects scripts by filename prefix rather than a separate category. In NSE, using a wildcard like http-* on the --script option tells Nmap to load every script file whose name starts with http-. That means all HTTP-related scripts that have filenames beginning with http- get run, not just a single file and not scripts that merely contain http somewhere in their name. This is why the correct choice describes scripts whose filenames begin with http-. The other options don’t fit because they either imply a single file, a formal http- category, or match any script with http anywhere in its name, rather than a specific prefix.