What is the primary function of Metasploit's 'Payload' modules?

• A. To deliver a backdoor for persistence.
• B. To execute code remotely on a target system.
• C. To perform port scanning.
• D. To enumerate user accounts.

Answer: (B)

In Metasploit, payloads are the code that runs on the target after you’ve gained access. Their primary function is to execute code remotely on the target system, enabling you to interact with and control that system—for example, spawning a shell or establishing a Meterpreter session so you can run commands and perform further actions.

Other activities like port scanning are carried out by scanning modules, not payloads. Enumerating user accounts is a post-exploitation task done by other modules as well. Some payloads can help establish a backdoor for persistence, but that’s a capability of the payload’s actions, not its core purpose.