During enumeration, which action should be taken to create a complete network map and document results?

• A. Document only open ports without services or device types.
• B. Connect via SSH to each device and run custom scripts.
• C. Manually ping every host and record only in a notebook.
• D. Use a tool like Nmap to scan the network and export results in multiple formats using the -oA switch.

Answer: (D)

During enumeration, you want a complete view of the network: live hosts, open ports, running services and versions, and often OS information, all documented in a reproducible way. Using a tool like Nmap automates the discovery across the entire network and builds a coherent map of hosts and services. Exporting the results in multiple formats with a single command provides practical artifacts: a human-readable report, an XML dump for automated processing, and a grepable/text file for quick searches. This combination yields a thorough, auditable map and usable documentation that can be shared, archived, and re-analyzed later. In contrast, documenting only open ports, relying on manual, non-scalable scanning, or logging ad-hoc data without exports results in partial or non-reusable records.