CEH Enumeration and System Hacking Practice Question
Which password cracking technique involves trying every possible combination of characters until the correct password is found?
⚠ Common exam trap
Test-takers frequently confuse 'brute force' with 'dictionary attack' because both involve guessing passwords, but the key distinction is that brute force exhaustively tries all combinations while dictionary attacks rely on a precompiled list of likely passwords.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Brute force attack
A brute force attack systematically tries every possible combination of characters from a defined character set (e.g., lowercase, uppercase, digits, special symbols) until the correct password is found. This method guarantees eventual success but is computationally expensive and time-consuming, especially for long or complex passwords. It is the most exhaustive form of password cracking, as it does not rely on any precomputed data or wordlists.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Rainbow table attack
Why it's wrong here
A rainbow table attack leverages precomputed hash chains to reverse a hash into its plaintext password. Instead of exhaustively guessing, it performs a lookup against a massive database of pre-calculated hash-to-plaintext mappings. This method exploits a time-memory tradeoff, significantly speeding up the cracking process for common passwords by avoiding real-time computation of every possible combination.
- ✗
Dictionary attack
Why it's wrong here
A dictionary attack attempts to crack passwords by systematically trying entries from a predefined list of common words, phrases, and previously leaked passwords. This technique relies on the prevalence of weak, easily guessable passwords found in dictionaries or public data breaches. It is highly efficient for common passwords but does not explore the entire character space, making it ineffective against complex, unique passwords.
- ✓
Brute force attack
Why this is correct
A brute force attack is a systematic password cracking technique that attempts every possible character combination within a defined character set and length until the correct password is found. This method guarantees finding the password if given enough time and computational resources, as it exhaustively explores the entire search space. Its primary drawback is the immense computational power and time required, especially for longer and more complex passwords.
- ✗
Hybrid attack
Why it's wrong here
A hybrid attack combines elements of both dictionary and brute force methods to enhance cracking efficiency. It typically starts with a dictionary wordlist and then systematically appends or prepends numbers, symbols, or common character variations to each dictionary entry. This approach targets common password patterns, such as 'password123' or 'Summer!', without resorting to a full, unconstrained exhaustive search of all possible character combinations.
Go deeper
Related to this question
About these practice questions
One of 870 original CEH practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CEH practice question is part of Courseiva's free EC-Council certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CEH exam.