Which NMAP script category tests for authentication issues?

• A. Discovery
• B. Auth
• C. Dos
• D. Malware

Answer: (B)

Nmap's NSE script groups are organized by what they test. The authentication category is specifically for checking login controls, credential handling, and potential bypass or weak-password issues. Scripts in this category try to log in with credentials, detect anonymous or default access, and surface weak authentication configurations on services like HTTP, SSH, FTP, and more. This is exactly what “tests for authentication issues” means—verifying whether a service properly requires and enforces authentication.

Discovery scripts identify hosts and services, DoS scripts look for denial-of-service conditions, and malware-related scripts search for signs of malicious software.