CEH Practice Question: Malware, Social Engineering and Network Attacks
Which tool is specifically designed to create and manage phishing campaigns for security awareness testing?
⚠ Common exam trap
In CEH, candidates often confuse Metasploit (a general exploitation framework) with SET (a specialized social engineering toolkit). SET uses Metasploit for payload generation, but Metasploit itself does not manage phishing campaigns—SET does.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
SET
The Social-Engineer Toolkit (SET) is an open-source Python-driven framework specifically designed for social engineering attacks, including the creation and management of phishing campaigns. It automates the generation of malicious emails, credential harvesting pages, and payload delivery, making it the standard tool for security awareness testing in CEH contexts.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Metasploit
Why it's wrong here
Metasploit is a comprehensive exploitation framework primarily used for developing, testing, and executing exploit code against vulnerable systems. While it can be leveraged in the post-exploitation phase of a social engineering attack to establish persistence or escalate privileges, its core design is focused on technical vulnerabilities and payload delivery, not the initial creation and management of phishing campaigns or social engineering lures themselves. It's an exploitation tool, not a social engineering campaign builder.
- ✗
Nmap
Why it's wrong here
Nmap (Network Mapper) is a powerful utility designed for network discovery and security auditing, identifying active hosts, open ports, services, and operating systems on a network. Its function is purely reconnaissance, mapping the network infrastructure to identify potential targets for technical exploits. Nmap has no capabilities for crafting phishing emails, creating malicious websites, or managing social engineering attack vectors, making it entirely unsuitable for creating and managing phishing campaigns.
- ✗
Wireshark
Why it's wrong here
Wireshark is a robust network protocol analyzer that captures and displays network traffic in real-time, allowing for deep inspection of individual packets. It is invaluable for network troubleshooting, analysis, and understanding communication protocols. While an attacker might use Wireshark to analyze network traffic related to a social engineering attempt or to capture credentials if transmitted insecurely, it is not designed for the creation or management of phishing campaigns or social engineering attack elements.
- ✓
SET
Why this is correct
The Social Engineering Toolkit (SET) is an open-source framework specifically engineered to perform various social engineering attacks, including spear-phishing, website attack vectors, and credential harvesting. It automates the creation of malicious web pages, email templates, and other deceptive elements crucial for a successful social engineering campaign. Therefore, SET is precisely designed to create and manage the components and execution of phishing and social engineering attacks.
Go deeper
Related to this question
Learn chapter
Social Engineering
Key term
Covering Tracks
Covering tracks is the process attackers use to hide their activity and remove evidence of a security breach after gaining unauthorized access to a system.
Key term
Nmap Scanning
Nmap scanning is a method used to discover devices running on a network and find open ports, services, and security weaknesses.
About these practice questions
One of 870 original CEH practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CEH practice question is part of Courseiva's free EC-Council certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CEH exam.