Dark Web Forensics CHFI Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   When collecting evidence from a dark web site, why is it important to document the exact date and time of access?

   • ATo prove that the investigator had authorization to access the site.
   • BTo establish a timeline of the investigation and maintain the chain of custody.
   • CTo ensure the evidence is admissible in court without any further validation.
   • DTo calculate the exact time the site will be available again.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   An investigator is documenting a dark web marketplace listing for evidence. The investigator uses Tor Browser and has taken screenshots. What additional step is essential to preserve the evidence's integrity for court?

   • ASave the entire Tor Browser profile to a USB drive.
   • BRecord the exact date and time, the URL, and a hash of the screenshot file.
   • CEmail the screenshot to a personal email account for safekeeping.
   • DPrint the screenshot and sign it.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which of the following is a primary legal challenge in dark web forensics?

   • AAll dark web evidence is automatically inadmissible in court.
   • BJurisdictional issues because dark web servers and users can be located in different countries.
   • CThe dark web is entirely unregulated, so no laws apply.
   • DThere are no forensic tools available to collect evidence from the dark web.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which investigative technique involves law enforcement officers posing as criminals to gain trust and gather intelligence on dark web forums?

   • ANetwork traffic analysis
   • BDisk forensics
   • COpen-source intelligence (OSINT) gathering
   • DUndercover operations
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A forensic investigator in Country A needs to collect evidence from a dark web marketplace that is hosted on servers in Country B. The investigator has obtained a warrant in Country A. What is the primary legal challenge they face?

   • AThe dark web is illegal in Country B, so the evidence cannot be used.
   • BThe warrant may not be enforceable in Country B, requiring mutual legal assistance or international cooperation.
   • CThe investigator must use a VPN to hide their identity from Country B's authorities.
   • DThe evidence must be deleted after collection to comply with Country B's privacy laws.
   Reveal Solution Discussion Select an answer first