Which statement best describes the purpose of db_nmap -sV -sC in Metasploit?

• A. To identify services and misconfigurations on a target host
• B. Enumerate firewall rules
• C. Exfiltrate data
• D. Crack passwords

Answer: (A)

db_nmap runs an Nmap scan from within Metasploit and stores the results in the database, while -sV enables service version detection and -sC runs the default NSE scripts. Version detection reveals exactly which services and their versions are exposed, outlining the target’s attack surface. The default NSE scripts probe for common misconfigurations and weaknesses, highlighting potential issues you might leverage or remediate. Put together, this combination focuses on identifying what services are running and where misconfigurations or weaknesses may be, which is why it’s the best description. It isn’t about firewall rule enumeration, data exfiltration, or password cracking.