A journalist in a restrictive country needs to communicate securely with a source. The journalist's organization recommends using the dark web. Which tool should the journalist use to access a .onion site for secure communication?

A standard web browser with HTTPS

A forensic analyst is preparing to access a known illicit marketplace for intelligence gathering. The analyst must ensure that the traffic is anonymized and that the destination is only reachable through the Tor network. Which access method should the analyst use?

Set up an I2P tunnel and use the I2P browser to reach the .onion address

Use the Tor Browser to connect to the .onion address directly

Configure a SOCKS5 proxy in the browser to route traffic through a commercial VPN

Use a standard web browser with HTTPS to visit the marketplace's clearnet mirror

A forensic analyst needs to access a known .onion service to capture its public-facing content for evidence. The analyst's workstation is connected to a corporate network that blocks direct Tor connections. Which approach should the analyst use to access the .onion service while minimizing the risk of exposing the workstation's real IP address?

Access the .onion service via a public Tor2web proxy from the corporate network

Use a dedicated forensic workstation on an isolated network with Tor Browser and a VPN

Install Tor on the analyst's primary workstation and use the corporate network directly

Configure Tor Browser to use a bridge relay and connect through the corporate network

A security analyst is explaining to management how Tor provides anonymity. Which statement accurately describes the encryption and routing in Tor?

Tor relies on a central directory server to route all traffic

Tor encrypts the entire message end-to-end, so no node can see the content

Tor routes traffic through three relays, each decrypting a layer to reveal the next hop

Tor uses a single proxy server that encrypts all traffic

A journalist is using Tor to communicate with a source who is leaking sensitive information. The journalist wants to ensure that their communication is not intercepted. Which statement about Tor's security is accurate?

Tor provides end-to-end encryption, so the content of the communication is protected from the source to the journalist

Tor encrypts the content of all communications, making it impossible for anyone to read the messages

Tor is only useful for accessing the dark web, not for secure communication

Tor hides the user's IP address from the destination, but the destination may still see the content if it is not encrypted

EC-CouncilDigital Forensics Essentials

Domain 6Objective 1

Dark Web Concepts and Investigation DFE Practice Questions (Page 8)

Part of the Dark Web and Email Forensics domain, which makes up ~16% of our current practice bank.

47questions here

10free pages

7concepts

Questions 36–40

36application · easy
A journalist in a restrictive country needs to communicate securely with a source. The journalist's organization recommends using the dark web. Which tool should the journalist use to access a .onion site for secure communication?
Select an answer first
37application · medium
A forensic analyst is preparing to access a known illicit marketplace for intelligence gathering. The analyst must ensure that the traffic is anonymized and that the destination is only reachable through the Tor network. Which access method should the analyst use?
Select an answer first
38application · medium
A forensic analyst needs to access a known .onion service to capture its public-facing content for evidence. The analyst's workstation is connected to a corporate network that blocks direct Tor connections. Which approach should the analyst use to access the .onion service while minimizing the risk of exposing the workstation's real IP address?
Select an answer first
39application · medium
A security analyst is explaining to management how Tor provides anonymity. Which statement accurately describes the encryption and routing in Tor?
Select an answer first
40application · medium
A journalist is using Tor to communicate with a source who is leaking sensitive information. The journalist wants to ensure that their communication is not intercepted. Which statement about Tor's security is accurate?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to DFE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “DFE” is a trademark of its owner, used for identification only.