Investigating Businesses GOSI Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A security team is investigating a suspicious website that impersonates a legitimate business. They want to find other domains that may be part of the same malicious infrastructure. Which technique would be most effective?

   • ACheck the website's SSL certificate for the issuer name.
   • BPerform a reverse WHOIS lookup on the registrant email or name used for the suspicious domain.
   • CSearch for the business name on social media to find other official accounts.
   • DLook up the website's IP address and assume all domains on that IP are related.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   An analyst is profiling a small business's online presence. The business has a LinkedIn page, a Twitter account, and a blog. Which approach would yield the most useful intelligence about the business's operations and personnel?

   • ADownload all images from the blog and perform reverse image searches.
   • BAnalyze the connections and follows of the business's social media accounts to identify key employees and partners.
   • CCheck the blog's RSS feed for the author's email address.
   • DCount the number of followers on each platform to gauge the business's market reach.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   An analyst is investigating a company that presents itself as 'GreenLeaf Trading LLC' on its website, which lists a PO Box address and a generic contact email. The analyst needs to confirm the legal entity behind the site. Which approach best establishes the legal identity of the business?

   • ACheck the website's SSL certificate to see the certificate's organization field.
   • BPerform a reverse WHOIS lookup on the domain to find the registrant's personal name and address.
   • CSearch the state corporate registry for 'GreenLeaf Trading LLC' and cross-reference the registered agent and filing history with the website's contact details.
   • DUse Google Maps to locate the physical address associated with the PO Box.
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A financial investigator is tracing the ownership of a company that uses a payment processor. The payment processor's public directory lists the company's tax ID, but the tax ID is registered to a different business name. The investigator needs to determine if this is a legitimate parent-subsidiary relationship or a shell company. Which additional evidence would best distinguish between these possibilities?

   • AThe company's website uses the parent company's logo.
   • BThe corporate registry shows the parent company as the sole member of the LLC, and the LLC's filings are consistent with a subsidiary.
   • CThe company's social media follows the parent company's account.
   • DThe company's domain is hosted on the same server as the parent's domain.
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   An analyst is investigating a company that lists a foreign supplier on its website. The supplier's domain is registered with privacy protection, but the supplier's website uses the same Google Analytics tracking ID as the target company's website. What is the most reasonable conclusion?

   • AThe supplier is a competitor trying to steal the target's traffic data.
   • BThe supplier and the target company are likely operated by the same entity, as shared analytics IDs indicate common management.
   • CThe supplier is using the target company's analytics by mistake.
   • DThe supplier is a customer of the target company.
   Reveal Solution Discussion Select an answer first