CEH Enumeration and System Hacking Practice Question
Which THREE of the following are components of the CHPSET system hacking methodology?
⚠ Common exam trap
The CEH exam often tests candidates by mixing pre-exploitation steps (like scanning) with post-exploitation phases (like cracking and privilege escalation), so the trap is assuming that all enumeration activities are part of the CHPSET methodology, when in fact CHPSET only covers actions after initial access.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Cracking passwords
Cracking passwords is a core phase in the CHPSET (Cracking, Hacking, Privilege escalation, System hacking, Erasing tracks, Tunneling) system hacking methodology. After gaining initial access, the attacker extracts password hashes (e.g., from SAM or LSASS) and uses tools like John the Ripper or Hashcat to crack them offline, enabling further access or lateral movement.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Port scanning
Why it's wrong here
Port scanning is a foundational reconnaissance technique used to identify open ports and services running on a target system or network. Its primary purpose is information gathering to discover potential entry points and vulnerabilities, occurring *before* an attacker attempts to gain direct access or manipulate the system itself. Therefore, it precedes the active system hacking phase, which involves exploitation and post-exploitation activities.
- ✗
Vulnerability scanning
Why it's wrong here
Vulnerability scanning involves using automated tools to identify known security weaknesses and misconfigurations within a system or network. While crucial for identifying potential attack vectors, it is an *assessment* activity that typically occurs during the reconnaissance or scanning phase, providing input for subsequent exploitation. It does not constitute the direct actions of gaining control or manipulating a system, which are hallmarks of system hacking.
- ✓
Cracking passwords
Why this is correct
Cracking passwords is a critical component of system hacking, often employed to gain initial unauthorized access to a system or to elevate privileges once inside. This involves using various techniques like brute-force, dictionary attacks, or rainbow tables against hashed credentials obtained from a target. Successful password cracking directly facilitates unauthorized authentication, enabling an attacker to impersonate legitimate users and access system resources.
- ✓
Privilege escalation
Why this is correct
Privilege escalation is a fundamental technique within the system hacking phase, where an attacker, having gained initial low-level access, seeks to obtain higher-level permissions on the compromised system. This often involves exploiting software vulnerabilities, misconfigurations, or kernel flaws to transition from a standard user account to an administrator or root account. Achieving elevated privileges is crucial for maintaining persistence, disabling security controls, and accessing sensitive data.
- ✓
Erasing tracks
Why this is correct
Erasing tracks, also known as covering tracks or anti-forensics, is a crucial post-exploitation activity within the system hacking phase. This involves systematically removing or altering log files, deleting temporary files, modifying timestamps, and cleaning up any tools or scripts used during the intrusion. The objective is to eliminate evidence of the attacker's presence and activities, making it difficult for forensic investigators to detect the breach or attribute it to a specific source, thereby ensuring anonymity and preventing detection.
Go deeper
Related to this question
Learn chapter
Introduction to Ethical Hacking
Key term
Privilege escalation
Privilege escalation is when a user or attacker gains more access or control over a system than they are supposed to have.
Key term
Covering Tracks
Covering tracks is the process attackers use to hide their activity and remove evidence of a security breach after gaining unauthorized access to a system.
About these practice questions
Courseiva writes every CEH question from scratch — 870 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CEH practice question is part of Courseiva's free EC-Council certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CEH exam.