What results will the following command yield: 'NMAP -sS -O -p 123-153 192.168.100.3'?

The -p 123-153 syntax defines a contiguous port range from 123 to 153, not two individual isolated ports, and this option also omits the OS detection behavior introduced by -O.

While it correctly identifies the stealth scan and port range, it entirely ignores the -O flag, which adds OS detection as a third distinct function of the command.

The -p flag specifies ports to include in the scan, not exclude - NMAP uses --exclude-ports to exclude a range, making this interpretation technically incorrect.

The -sS flag initiates a TCP SYN stealth scan, the -O flag enables OS fingerprinting via TCP/IP stack analysis, and -p 123-153 restricts the scan to ports 123 through 153 on the target host. All three behaviors are reflected in option D, making it the only complete and accurate description of the command.