CEH Enumeration and System Hacking Practice Question
A penetration tester obtains a list of password hashes and uses RainbowCrack. Which statement BEST describes how RainbowCrack works?
⚠ Common exam trap
EC-Council often tests the distinction between offline hash-cracking tools (like RainbowCrack) and online password-guessing attacks, so the trap here is confusing a precomputed table attack (time-memory trade-off) with a brute-force or dictionary attack that computes hashes in real time.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
It uses time-memory trade-off with precomputed hash chains
RainbowCrack implements a time-memory trade-off attack by precomputing hash chains for a given set of passwords and storing them in rainbow tables. When a password hash is provided, the tool looks up the hash in these tables to reverse it, avoiding the need to recompute hashes for every possible password. This makes it far faster than brute-force for cracking hashes, provided the password is covered by the precomputed chains.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
It uses a dictionary attack with word mangling rules
Why it's wrong here
This statement is incorrect because rainbow tables do not primarily rely on dictionary attacks or word mangling. While a dictionary attack compares hashes against a list of common words and their variations, rainbow tables employ a more sophisticated time-memory trade-off technique. They generate extensive precomputed tables using hash chains and reduction functions to cover a much broader keyspace, rather than just permutations of known dictionary words.
- ✗
It uses online password guessing against the target service
Why it's wrong here
This option is incorrect because rainbow tables are specifically designed for offline password cracking. A penetration tester uses rainbow tables after obtaining password hashes from a compromised system, then attempts to reverse these hashes without any direct interaction with the target's live authentication service. Online password guessing, conversely, involves repeatedly submitting login attempts to an active service, which is prone to account lockouts and detection mechanisms.
- ✗
It uses a brute-force attack by trying all possible character combinations
Why it's wrong here
This statement is inaccurate because a brute-force attack systematically tries every single possible character combination, typically in real-time, until the correct password is found. In contrast, rainbow tables are a precomputed data structure that significantly reduces the real-time computational effort required for cracking. They leverage pre-calculated hash chains to quickly look up potential plaintext values, making them distinct from a pure, on-the-fly brute-force approach.
- ✓
It uses time-memory trade-off with precomputed hash chains
Why this is correct
This option is correct because rainbow tables are a prime example of a time-memory trade-off technique in cryptography. They involve a significant upfront investment in computational time to precompute vast tables (requiring substantial memory storage) containing chains of hashes and their corresponding plaintext values. This extensive precomputation allows for extremely rapid lookup and cracking of captured password hashes later, as the system avoids the need to recompute every possible password combination for each target hash.
Go deeper
Related to this question
About these practice questions
One of 870 original CEH practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CEH practice question is part of Courseiva's free EC-Council certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CEH exam.