What are the three most important tables in the Metasploit database?

• A. hosts, services, vulns
• B. users, groups, logs
• C. exploits, payloads, auxiliaries
• D. creds, notes, loot

Answer: (A)

The question tests understanding of how Metasploit’s database organizes a target and its findings. The three most important tables are hosts, services, and vulns. hosts represents each discovered asset with identifiers like IP, host name, OS info, and timing. services attaches to a host and records the open ports and the service details (port, protocol, banner, version). vulns captures vulnerabilities found on those services and links back to the specific host and service. This chain—host, then its services, then the vulnerabilities found on those services—lets you see an asset, what it exposes, and what weaknesses exist, which is essential for prioritization, pivoting, and reporting.

Other data like creds, notes, or loot are useful, but they’re supplementary to this core model. Modules or collections of exploits (exploits, payloads, auxiliaries) are part of the tooling, not the primary data structure you rely on to map and triage targets.