Ch. 10

Question 1

What provides anonymity to its users through encryption and is not indexed by search engines?

Answer 1

Dark web

Question 2

Tor is a browser that is used to access the contents of the __________.

Answer 2

dark web

Question 3

What relay provides an entry point to the Tor network?

Answer 3

Entry/guard relay

Question 4

What relay is used for the transmission of data in an encrypted format?

Answer 4

Middle relay

Question 5

In such scenarios, where the usage of the Tor network is restricted, what helps circumvent the restrictions and allows users to access the Tor network? The usage of these nodes makes it difficult for governments, organizations, and ISPs to censor the usage of the Tor network.

Answer 5

Bridge nodes

Question 6

The Tor’s hidden service protocol allows users to host websites anonymously with what domains and can only be accessed by users of the Tor network?

Answer 6

.BIT

Question 7

On a Windows machine, the Tor browser uses which port for establishing connections via Tor nodes?

Answer 7

9150/9151

Question 8

When a Tor browser is installed and executed on a Windows machine, the user activity is recorded in which Windows Registry?

Answer 8

HKEY_\SOFTWARE\Mozilla\Firefox\Launcher

Question 9

What command will allow investigators to test for the active network connection on the machine and be able to identify whether Tor was used on that machine?

Answer 9

netstat -ano

Question 10

The directory of the ‘state’ file where the Tor browser is executed is located where?

Answer 10

\Tor Browser\Browser\TorBrowser\Data\Tor\

Question 11

On a Windows machine, where are the prefetch files located?

Answer 11

C:\WINDOWS\Prefetch