A businessman receives a phishing email disguised as an “Income Tax Notice.” What type of cybercrime is this?

Which legal section in India is most applicable for morphing photographs for blackmail?

In cybercrime awareness sessions, what’s the best convincing way to protect and delete photos used in blackmail?

You are tracing a banking fraudster. The suspect is using a VPN + Proxy chain. Which tool is best to detect traffic anomalies?

Which statement about proxies is TRUE?

a) Proxy always hides identity completely
b) Proxy only hides IP but not device fingerprint
c) Proxy is better than VPN in encryption
d) Proxy is untraceable

A student claims: “I’ll use a proxy to do online banking securely.” As an expert, what’s your correction?

a) Proxies provide end-to-end encryption
b) Proxies are safer than VPN
c) Proxies are insecure for banking; use VPN with HTTPS
d) Proxies and VPN both unsafe

Situation: You set a 3000 INR monthly transaction limit in a payment wallet system. The attacker tries to bypass it by splitting transactions into multiple smaller payments. What’s this attack called?

a) Double-spending attack
b) Transaction Splitting / Limit Bypass
c) Identity Theft
d) Time-of-check to time-of-use (TOCTOU)

You are searching a suspect’s digital footprint. Which OSINT technique gives real IP even if user uses proxy sometimes?

a) WHOIS lookup
b) DNS Leak Testing
c) Reverse Image Search
d) Shodan IoT Scan

Situation: A terrorist group is suspected to be using dark web forums to recruit members. Which OSINT tool helps collect intel?

a) Maltego
b) Tor Browser
c) Wireshark
d) Nmap

During an OSINT investigation, you find an email “rajiv123@gmail.com.” What’s the next best OSINT step?

a) Send him a phishing email
b) Run Google dorks
c) Run Hunter.io or HaveIBeenPwned for breach details
d) Track via IP lookup

Which OSINT principle is most important when teaching intelligence officers?

a) Don’t leave footprints online
b) Always hack into accounts directly
c) Use personal social media profiles to search
d) Keep OSINT limited to Google

In a Dark Web OSINT task, which protocol monitoring is most useful?

a) HTTP
b) HTTPS
c) Onion (Tor) Protocol
d) FTP

A fake loan app is stealing money. Which forensic strategy is most important?

a) Reverse Engineering APK
b) File System Imaging
c) Proxy Monitoring
d) Social Media Tracking

In a CTF, you find a Base64 encoded flag. What’s your next step?

a) Crack with Hydra
b) Decode using CyberChef/Base64 decoder
c) Open with Wireshark
d) Run Shodan

During CTF, the challenge states: “Website refresh in 48 hours, flag hidden in source.” Where should you look first?

a) Robots.txt
b) Page source HTML comments
c) Cookies
d) Server logs

Which CTF challenge best improves real-world cybercrime investigation skills?

a) Crack the password
b) Trace IP using proxy chain
c) Capture the Flag on banking fraud scenario
d) Google dorks challenge

If a student is caught using proxy to cheat in online exams, what’s the best ethical hacking approach to detect it?

a) Monitor keystrokes
b) IP Logging + Proctoring + Behavioral Analysis
c) Force webcam monitoring
d) Ban all VPN usage worldwide

A hacker claims he is “invisible” because he always uses Tor. What’s your counter argument?

a) Tor hides everything perfectly
b) DNS leaks, browser fingerprinting & exit nodes can reveal info
c) Proxy is safer than Tor
d) Tor is illegal

You are leading a CyberShield Bootcamp. A participant asks: “What’s the single most important skill to master cybercrime investigation?”

a) Learning proxy bypass
b) Mastering coding only
c) Legal awareness + Technical Investigation Balance
d) Hacking Wi-Fi passwords
Answer: c) Legal awareness + Technical Investigation Balance