The Metasploit database stores data across several tables; which of the following are among the key tables used to track discovered network information?

• A. hosts, services, vulns
• B. users, groups, logs
• C. creds, notes, loot
• D. modules, payloads, exploits

Answer: (A)

Focusing on how Metasploit organizes discovered network information, the database uses a hierarchy where each discovered host is recorded in a hosts table, each open or detected service on those hosts is stored in a services table, and any vulnerabilities found are captured in a vulns table. This trio directly maps the network landscape: who’s there, what they’re exposing, and what weaknesses were found. The relationships are intuitive—one host can have many services, and each service can have associated vulnerabilities.

Other tables serve different purposes. Credentials, notes, and loot hold obtained credentials, observations, and captured data rather than the network topology itself. Users, groups, and logs relate to access control and auditing. Modules, payloads, and exploits are components of the framework used to perform attacks, not the discovered network information.