Which of the following is a common type of marketplace found on the dark web?

Illegal goods and services marketplace

Online retail store like Amazon

An investigator is analyzing a dark web marketplace that uses a cryptocurrency for transactions. The investigator wants to trace a specific transaction to a real-world identity. Which factor is MOST likely to hinder the investigation?

The marketplace uses a coin-mixing service to obscure the transaction trail

The investigator does not have access to the marketplace's server logs

The cryptocurrency is not widely accepted by exchanges

The cryptocurrency uses a public ledger that records all transactions

An investigator is trying to identify the operator of a dark web marketplace. The operator uses Tor and accepts Monero, a privacy-focused cryptocurrency. Which challenge does this combination present?

Tor's encryption prevents any traffic analysis

The operator's identity is hidden by the marketplace's escrow system

The marketplace's .onion address cannot be resolved

Monero transactions are not publicly traceable, making financial analysis difficult

An investigator is tracking a ransomware group that uses a Tor hidden service for negotiations. The group has changed their .onion address multiple times. Which technique is most effective for correlating the new address with the same group?

Use a web crawler to index the new site's content

Search for the new .onion address on public search engines

Monitor the group's Bitcoin wallet addresses for incoming payments

Analyze the TLS certificates used by the hidden service

An analyst is investigating a dark web marketplace that sells stolen credentials. The analyst wants to gather intelligence on the sellers without making a purchase. Which technique is most appropriate?

Monitor the marketplace's public forums and chat rooms for seller activity

Create a fake buyer account and place a small order to see how the seller responds

Contact the sellers directly and ask for their real identities

Use a vulnerability scanner to find weaknesses in the marketplace's website

EC-CouncilDigital Forensics Essentials

Domain 6Objective 1

Dark Web Concepts and Investigation DFE Practice Questions (Page 2)

Part of the Dark Web and Email Forensics domain, which makes up ~16% of our current practice bank.

47questions here

10free pages

7concepts

Questions 6–10

6foundation · easy
Which of the following is a common type of marketplace found on the dark web?
Select an answer first
7expert · hard
An investigator is analyzing a dark web marketplace that uses a cryptocurrency for transactions. The investigator wants to trace a specific transaction to a real-world identity. Which factor is MOST likely to hinder the investigation?
Select an answer first
8expert · hard
An investigator is trying to identify the operator of a dark web marketplace. The operator uses Tor and accepts Monero, a privacy-focused cryptocurrency. Which challenge does this combination present?
Select an answer first
9expert · hard
An investigator is tracking a ransomware group that uses a Tor hidden service for negotiations. The group has changed their .onion address multiple times. Which technique is most effective for correlating the new address with the same group?
Select an answer first
10application · medium
An analyst is investigating a dark web marketplace that sells stolen credentials. The analyst wants to gather intelligence on the sellers without making a purchase. Which technique is most appropriate?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to DFE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “DFE” is a trademark of its owner, used for identification only.