Dark Web Concepts and Investigation DFE Practice Questions (Page 9)

Questions 41–45

1. 41foundation · easy

   Which of the following is a technique used to investigate dark web activities?

   • AUsing standard search engines to find hidden services.
   • BBlocking all dark web traffic at the ISP level.
   • CMonitoring public forums and marketplaces for intelligence gathering.
   • DSending physical mail to suspected users.
   Reveal Solution Discussion Select an answer first
2. 42expert · hard

   A law enforcement team is investigating a dark web marketplace that uses multi-hop Tor routing and cryptocurrency payments. The team has a warrant to seize the server, but the marketplace is hosted in a jurisdiction with strict data protection laws. Which factor most critically complicates the investigation?

   • AThe marketplace's use of end-to-end encryption prevents decryption of seized data
   • BThe difficulty in identifying the physical location of the server
   • CThe high cost of cryptocurrency analysis tools
   • DThe need to coordinate with international authorities due to jurisdictional boundaries
   Reveal Solution Discussion Select an answer first
4. 43expert · hard

   A law enforcement investigator wants to take over a dark web marketplace's server located in a foreign country to gather evidence. The investigator's agency has a warrant from their own country. Which consideration is MOST important before proceeding?

   • AThe investigator can proceed because the server is on the dark web and therefore outside any jurisdiction
   • BThe investigator must obtain legal authorization in the foreign country, such as through an MLAT or other international cooperation mechanism
   • CThe investigator should use a VPN to hide their identity when accessing the server
   • DThe warrant is sufficient because the investigation is for a serious crime
   Reveal Solution Discussion Select an answer first
5. 44expert · hard

   An investigator is monitoring an illegal marketplace on Tor. The marketplace uses multi-hop encryption and requires users to log in with credentials that are only valid for a short session. The investigator wants to capture the login credentials of a specific vendor. Which technique is most likely to succeed while remaining within legal boundaries?

   • AUse a man-in-the-middle attack on the vendor's Tor connection to intercept the login request
   • BDeploy a network sniffer on the Tor exit node to capture plaintext credentials
   • CCreate a fake vendor account and interact with the target vendor to gather intelligence through social engineering
   • DCompromise the marketplace's web server and extract credentials from its database
   Reveal Solution Discussion Select an answer first
6. 45application · easy

   A new forensic analyst is told to investigate a case involving 'the dark web.' They ask which of the following is an example of a dark web resource. Which response is correct?

   • AA .onion service that is only accessible via Tor
   • BA public blog that is not indexed by Google
   • CA private corporate intranet that requires a VPN to access
   • DA social media profile that is set to 'private'
   Reveal Solution Discussion Select an answer first