Dark Web Forensics ECSS Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   In Tor's onion routing, how is the path from the client to the destination established to ensure anonymity?

   • AThe client sends the message to the first relay, which then sends it directly to the destination.
   • BThe destination server selects the path and encrypts the response in a single layer.
   • CA central directory server routes the traffic directly to the destination without intermediate relays.
   • DThe client selects a series of relays and encrypts the message in layers, with each relay peeling off one layer.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A security analyst is explaining to a client how Tor provides anonymity for dark web users. The client asks why Tor is considered more anonymous than a standard VPN. Which statement accurately describes a key difference?

   • ATor encrypts all traffic from the user's device to the destination server, preventing the destination from seeing the user's IP address.
   • BTor uses a single proxy server that hides the user's IP address from the destination.
   • CTor does not log any user activity, whereas VPNs always keep logs.
   • DTor routes traffic through multiple relays, each encrypting the data, so no single relay knows both the source and destination.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is the primary purpose of using open-source intelligence (OSINT) in dark web investigations?

   • ATo monitor all Tor traffic in real-time.
   • BTo create fake identities for undercover operations.
   • CTo gather publicly available information that can lead to identifying suspects or their activities.
   • DTo hack into dark web servers to obtain evidence directly.
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A forensic investigator is considering using OSINT to gather information about a dark web vendor. The investigator plans to search social media and public forums for the vendor's username. What is the most important ethical consideration?

   • AUse a fake social media account to interact with the vendor.
   • BAvoid using OSINT because it is always illegal.
   • CShare the collected information with the public to raise awareness.
   • DEnsure that the OSINT collection does not violate the privacy rights of individuals who are not the target.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A dark web vendor advertises that they only accept Monero for payments. An investigator wants to trace the vendor's transactions. Which challenge is most significant?

   • AMonero's blockchain uses stealth addresses and ring signatures, making it difficult to link transactions to specific addresses.
   • BMonero transactions are not recorded on a public blockchain.
   • CMonero is not accepted by any dark web marketplaces.
   • DMonero wallets cannot be traced because they are stored offline.
   Reveal Solution Discussion Select an answer first