In Nikto, which option is used to specify the website to scan when virtual hosting is enabled on the target?

• A. -h [Target]
• B. -p [Port]
• C. -output [Filename]
• D. -vhost [Host Header]

Answer: (A)

The option to specify which website to scan is the one that provides the target host. In Nikto you tell the scanner exactly which site to test by passing its hostname or IP with that flag, so it knows which site on the target to evaluate. Even if the server uses virtual hosting (multiple sites on one IP), you identify the particular site by supplying its host name through this option. The other flags serve different purposes: port selection, output file, or explicitly setting the Host header for virtual hosts, rather than choosing the site to scan.