Investigating Businesses GOSI Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   An investigator is analyzing a manufacturing company's supply chain to identify hidden business associations. The company's website lists a logistics partner. Which additional step would best reveal a deeper connection?

   • ACheck the logistics partner's website for a list of all its clients.
   • BUse a search engine to find news articles about the logistics partner.
   • CSearch the logistics partner's corporate registry filings for shared officers or addresses with the manufacturing company.
   • DLook at the manufacturing company's social media for posts about the logistics partner.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   During an investigation, an analyst finds a payment page on a business's website that uses a third-party payment processor. The analyst wants to link this business to other online ventures. What is the most effective way to use the payment footprint?

   • APerform a reverse IP lookup on the payment processor's domain.
   • BContact the payment processor and request the business's transaction history.
   • CSearch for the payment processor's merchant ID or business name in public databases and other websites.
   • DCheck the website's source code for the payment processor's API keys.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is the primary purpose of mapping a business's domain names and web infrastructure in an OSINT investigation?

   • ATo identify related domains and hosting relationships that may reveal ownership or connections
   • BTo access the business's internal financial records
   • CTo obtain the personal email addresses of all employees
   • DTo determine the business's social media advertising budget
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   An OSINT analyst is investigating a company that appears to be a front for another business. The company's website lists a third-party logistics provider, and the domain is registered with a privacy service. Which technique would best uncover the true relationship?

   • ACheck the target company's social media for posts about the logistics provider.
   • BUse a search engine to find reviews of the logistics provider.
   • CLook at the target company's website's SSL certificate for the issuer.
   • DSearch the logistics provider's corporate filings for shared officers or addresses with the target company.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   An analyst is tracing the financial footprint of a shell company. The company's website lists a payment processor but no bank account details. Which step would best help link the shell company to its beneficial owner?

   • ASearch public records for the payment processor account's business name and associated contact details.
   • BLook up the company's domain WHOIS for a phone number.
   • CSearch the corporate registry for the company's tax ID.
   • DCheck the company's social media for mentions of its bank name.
   Reveal Solution Discussion Select an answer first