What does Metasploit's database primarily store to enable advanced queries?

• A. Only exploit modules.
• B. Only user credentials.
• C. Hosts, services, and vulnerabilities.
• D. Archived log files only.

Answer: (C)

Metasploit’s database is built to organize target information so you can run powerful, cross-cutting queries. It primarily stores records of hosts, the services detected on those hosts (including versions), and the vulnerabilities associated with those services. This data model lets you ask questions like which hosts have a particular service exposed, which hosts share a given vulnerability, or which service versions align with a specific CVE. It also enables correlating scan results, service data, and exploitation attempts across the target set. While credentials and exploit results can be stored for convenience and use, the main data you query against are hosts, services, and vulnerabilities. Archived logs aren’t the primary data store for enabling these queries.