Which default category includes scripts that run by default with -sC or -A?

• A. Vuln
• B. Safe
• C. Version
• D. Default

Answer: (D)

In Nmap’s NSE, scripts are organized into categories, and the default category is the set of scripts that Nmap runs automatically when you perform a standard script scan or an aggressive scan. Running with the default script scan (-sC) or the aggressive scan (-A) triggers the scripts in this default category to execute. That makes the correct category the one named Default. The other groups exist for specific purposes—vuln for vulnerability checks, safe for generally safe scripts, and version for version-detection scripts—but they’re not the ones automatically invoked by -sC or -A.