Certified Ethical Hacker (CEH) Practice Question

SeImpersonatePrivilege allows a user to impersonate the security context of another process after authentication. Potato-family attacks (Juicy Potato, PrintSpoofer, Rogue Potato) exploit this privilege by creating a rogue COM or named-pipe server, tricking a SYSTEM service into connecting, and then impersonating the incoming SYSTEM token. Because the technique can run entirely from memory with no on-disk artifacts, it satisfies the requirement to avoid writing files or changing settings. The runas command would still demand the Administrator password, an unquoted service-path exploit needs a writable directory and file placement, and loading an unsigned driver both requires a file on disk and is blocked by driver-signature enforcement without SeLoadDriverPrivilege.