CompTIA CySA+ CS0-003 (V3) Practice Question

The correct answer is device fingerprinting. The Nmap command uses the -sV flag for service and version detection and the -O flag for operating system (OS) detection. The process of gathering specific details about a device, such as its OS, open ports, and running service versions, is known as device fingerprinting. Credentialed vulnerability scanning requires authentication and was not performed. Static application security testing (SAST) involves analyzing an application's source code, which is not what Nmap does. Exploitation involves actively trying to leverage a vulnerability, which is a different phase of vulnerability management and is not accomplished with these Nmap flags.