OSINT Deep & Dark Web Investigation 2

Question 1

What is the primary protocol used by Tor to anonymize traffic across its network?

Accepted Answer

Onion routing with layered encryption

Answer

Tor uses onion routing, wrapping traffic in multiple layers of encryption that are peeled off at each relay node.

Question 2

Which tool is specifically designed to enumerate .onion hidden services and map the dark web?

Accepted Answer

OnionScan

Answer

OnionScan is an open-source tool that probes .onion services for security issues and correlating metadata.

Question 3

When accessing dark web markets for OSINT purposes, which risk is most associated with JavaScript being enabled in Tor Browser?

Accepted Answer

De-anonymization via browser fingerprinting or exploits

Answer

Enabled JavaScript can expose real IP addresses through browser exploits or canvas/WebRTC fingerprinting attacks.

Question 4

What does the term 'exit node' refer to in the context of a Tor network investigation?

Accepted Answer

The relay that decrypts and forwards traffic to the destination

Answer

The exit node is the final relay in the Tor circuit that decrypts the last layer and sends traffic to the clearnet destination.

Question 5

Which dark web search engine is commonly used by OSINT investigators to index .onion sites?

Accepted Answer

Ahmia

Answer

Ahmia is a clearnet-accessible search engine that indexes .onion hidden services while filtering illegal content.

(OSINT) Open Source Intelligence Certification Practice Test