How do threat actors use the open source tool nmap in the process of exploiting unpatched vulnerabilities?

A$.$

The open source tool nmap is used by threat actors to deliver phishing emails to an organization in an attempt to exploit a human vulnerability.

B$.$

The open source tool nmap is used by threat actors to steal credentials in an attempt to compromise a server or computer.

C$.$

The open source tool nmap is used by threat actors to collect information about which services are running on a server or computer.

D$.$

The open source tool nmap is used by threat actors to exfiltrate data from an organization who has been compromised by a cyber attack.