The correct answer is A because the core obstacle in the scenario is failed attribution. Investigators already have logs and service-side records, yet they still cannot reliably connect those artifacts to a real-world identity. That is one of the defining forensic difficulties of the dark web: its anonymity mechanisms are intentionally designed to obscure user identity and frustrate tracing. The CHFI v11 blueprint includes dark web concepts, TOR operation, risks of investigating the dark web, and dark web forensic challenges. Those objectives prepare candidates to recognize that the biggest barrier is often not the absence of data, but the inability to tie pseudonymous activity to a specific person with confidence. Option C mentions physical location and encrypted networks, which is related, but the question is centered more directly on identity correlation and attribution failure than geolocation. Option B focuses on analyst capability, and option D focuses on tool limitations, neither of which is the main issue described. In CHFI terms, when evidence exists but perpetrators remain unidentifiable because anonymity conceals them, the best answer is that tracing the perpetrators is difficult because the dark web hides their identities.