When doing a network scan using for example NMAP with its "-A" option, what layer of the OSI model does it work on? 

For reference, this is the description of the "-A" option:
*-A : "Enable OS detection, version detection, script scanning, and traceroute"*