Question 1

Question

A physician is accused of death threats via anonymous email. Investigation reveals the email was sent through multiple proxy servers and TOR network from a public WiFi location. The suspect's home computer shows no direct evidence. Evaluate which combination of digital artifacts would MOST conclusively link the suspect to the anonymous communication?

Accepted Answer

TOR browser installation artifacts, typing pattern analysis (keystroke dynamics), linguistic stylometry of email content, correlation with suspect's known writings, WiFi connection logs on suspect's devices matching crime timeframe, and browser artifacts showing proxy/anonymizer research preceding the incident

Answer

IP address logs from public WiFi and timestamp correlation alone

Answer

Eyewitness testimony of suspect's presence at WiFi location

Answer

Confession obtained during interrogation

Digital Forensics — MCQs

Digital Forensics — MCQs

On this page

Practice by Chapter

Want unlimited practice?