EC-CouncilDigital Forensics Essentials
Domain 6Objective 2
Tor Browser Forensics DFE Practice Questions (Page 1)
Part of the Dark Web and Email Forensics domain, which makes up ~16% of our current practice bank.
47questions here
10free pages
10concepts
Questions 1–5
- 1
Which file in the Tor Browser profile contains timestamps that can be used for timeline analysis?
Select an answer first - 2
In Tor Browser, where are saved passwords typically stored if the user chooses to save them?
Select an answer first - 3
On a Windows system, where is the Tor Browser user profile (containing bookmarks, history, and cookies) typically stored?
Select an answer first - 4
A forensic examiner is constructing a timeline of a suspect's Tor Browser activity. The examiner has the tor log, the browser's history database, and the browser's cache. The tor log shows the browser started at 10:00 AM, but the history database shows a website visited at 9:55 AM. Which conclusion is most likely?
Select an answer first - 5
A user has been using Tor Browser with the default settings. They believe that because they are using 'Private Browsing' mode, no data is saved to disk. However, they have manually bookmarked a site and saved a password for a forum. After closing the browser, which of the following artifacts will remain on disk?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “DFE” is a trademark of its owner, used for identification only.