What does the 'db_import' command do in Metasploit?

• A. Imports a file of results from another scanning tool into the framework's database.
• B. Exports the results to CSV.
• C. Imports user credentials for login.
• D. Imports exploit modules into memory.

Answer: (A)

The key idea here is how Metasploit lets you bring in data from other scanning tools into its centralized database so you can work everything from one place. The db_import command takes a results file produced by another scanner (for example, Nmap, Nessus, or OpenVAS), parses that file, and inserts the discovered hosts, ports, and service information into the Metasploit framework database. Once the data is in the database, you can leverage Metasploit’s workflow—tracking hosts, associating services, and using modules and auxiliary tools against those targets—without having to re-run scans from scratch.

So this command is about unifying external scan outputs with Metasploit’s own records, making it easier to pivot from discovery to exploitation or reporting. It’s not used for exporting results, nor for importing login credentials, nor for loading exploit modules into memory—the latter tasks are handled by different parts of the framework.