Dark Web Forensics ECSS Practice Questions (Page 9)

Questions 41–45

1. 41foundation · easy

   What is the first step in the forensic acquisition of digital evidence from a dark web source?

   • ADocumenting the scene and identifying the evidence to be collected.
   • BDecrypting all data using the suspect's private keys.
   • CImmediately shutting down the dark web site to prevent data loss.
   • DUploading the evidence to a public cloud for safekeeping.
   Reveal Solution Discussion Select an answer first
2. 42foundation · easy

   Which artifact from a suspect's computer would be most useful for reconstructing their dark web browsing activities?

   • AThe Tor browser's history and cache files.
   • BThe list of installed printers.
   • CThe recycle bin contents.
   • DThe Windows registry keys related to system uptime.
   Reveal Solution Discussion Select an answer first
4. 43foundation · easy

   Why is maintaining a chain of custody critical in dark web forensic investigations?

   • ATo allow law enforcement to share evidence with other agencies without restrictions.
   • BTo encrypt the evidence so that only authorized personnel can view it.
   • CTo ensure that the evidence is stored in a secure location that is accessible only to the lead investigator.
   • DTo prove that the evidence has not been tampered with from the moment of collection to presentation in court.
   Reveal Solution Discussion Select an answer first
5. 44foundation · easy

   Which legal challenge is most commonly associated with dark web forensics?

   • AThe requirement to use only open-source tools in investigations.
   • BJurisdictional issues because dark web servers and users can be located in different countries.
   • CThe inability to obtain warrants for digital evidence.
   • DThe lack of any laws regulating dark web activities.
   Reveal Solution Discussion Select an answer first
6. 45application · medium

   A cybercrime unit is investigating a dark web marketplace that sells counterfeit currency. The marketplace has a reputation system and requires buyers to deposit funds in Bitcoin. What aspect of the marketplace's structure is most valuable for investigators?

   • AThe marketplace's vendor ratings, which indicate the most active sellers.
   • BThe marketplace's escrow system, which holds funds in a central wallet, creating a transaction trail.
   • CThe marketplace's user feedback system, which may reveal usernames and activity patterns.
   • DThe marketplace's chat feature, which may contain conversations between users.
   Reveal Solution Discussion Select an answer first