Certified Ethical Hacker (CEH) Practice Question

The tester is using pivoting. By turning the compromised web server into an intermediary, all traffic to the database appears to originate from a trusted host in VLAN 10, allowing the attacker to move deeper into the environment. This is not privilege escalation (which raises permission levels on the same host), banner grabbing (which only collects service information), nor session fixation (which targets web authentication tokens). Pivoting is the concept of leveraging control over one system to attack additional internal assets that were previously inaccessible.