During an external assessment, a security analyst configures Nmap so that the hardware address recorded...

The correct answer is A. --spoof-mac 0.

Nmap supports MAC address spoofing as a firewall-evasion and scan-obfuscation option. The available reference material lists Nmap firewall evasion options and identifies --spoof-mac mac as the option used to spoof the MAC address .

The value 0 tells Nmap to generate a random MAC address. Because the question states that the recorded hardware address changes automatically each time, the random MAC option is the correct match.

Option B. --spoof-mac Dell is incorrect because this selects a MAC address associated with a specific vendor prefix, not the fully random behavior described.

Option C. --spoof-mac 00:01:02:25:56:AE is incorrect because it uses a fixed MAC address. Repeated scans would show the same spoofed address, not a new one each time.

Option D. --spoof-mac Dell 10.10.1.11 is incorrect because it is not the correct Nmap option format for this behavior.

Therefore, the best answer is A. --spoof-mac 0.