CEH Enumeration and System Hacking Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✓

  Applies mutations like appending numbers or symbols

  Why this is correct

  This technique involves taking words from a dictionary or wordlist and systematically modifying them using predefined rulesets. Common mutations include appending numbers (e.g., "password123"), prepending or appending special characters (e.g., "!password", "password!"), or changing case (e.g., "Password"). This method significantly expands the attack surface beyond simple dictionary words, effectively targeting users who create passwords by slightly altering common terms.

• ✗

  Tries every possible combination of characters

  Why it's wrong here

  This describes a pure brute-force attack, which attempts every single character combination within a defined character set and length. While theoretically guaranteed to find any password, the computational resources and time required for modern password lengths (e.g., 8+ characters with mixed complexity) make this approach practically infeasible. It would take an astronomically long time, rendering it unsuitable for typical penetration test timelines.

• ✓

  Combines dictionary and brute-force mutations

  Why this is correct

  This refers to a hybrid attack, which leverages the efficiency of dictionary attacks while incorporating elements of brute-force. It starts with a wordlist and then systematically applies various brute-force-like modifications to each word, such as appending all possible single-digit numbers, then two-digit numbers, or trying all permutations of a few special characters. This strategy effectively targets passwords that are based on common words but have minor, predictable additions.

• ✗

  Relies on precomputed hash chains

  Why it's wrong here

  This technique, commonly associated with rainbow tables, involves using large precomputed tables of hashes and their corresponding plaintext values. While historically effective against unsalted hashes, modern secure password storage practices almost universally employ salting. Salting adds a unique random value to each password before hashing, rendering precomputed hash chains ineffective as each hash becomes unique, preventing lookup in generic tables.

• ✓

  Uses a wordlist as a base

  Why this is correct

  This fundamental method, known as a dictionary attack, involves comparing a predefined list of common words, phrases, or previously leaked passwords against the target hashes. The effectiveness stems from the widespread human tendency to choose simple, memorable passwords found in dictionaries or common usage. This approach is highly efficient for cracking weak passwords without the extensive computational overhead of generating every possible combination.

Go deeper

Related to this question