Hack the Box Academy Network Enumeration with Nmap

Note: Medium Lab can be solved using command:
nmap -sSU -p53 <ip address> --script=dns-nsid

When interacting with an actual IDS I would avoid the -A switch, and instead recommend some combination of the following: -T 0 (paranoid timing), -f (fragmented packets), -D (specify a decoy source IP address), --data-length 200, and -g (use source port of a common network protocol like DNS/DHCP).