Investigating Businesses GOSI Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   An analyst is investigating a manufacturing company and notices that its website lists a supplier in a foreign country. The analyst wants to determine if the supplier is actually a related entity. Which approach would best reveal a hidden relationship?

   • ASearch for the supplier's name in the target company's employee email signatures.
   • BReview the target company's annual report for a list of suppliers.
   • CCompare the supplier's domain registration and hosting details with the target company's.
   • DCheck the supplier's social media for posts mentioning the target company.
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   An analyst is mapping the infrastructure of a target business and finds that the main domain uses a name server that also hosts domains for several other businesses. What is the most likely interpretation?

   • AThe businesses may share a web hosting provider or DNS management service, indicating a possible common administrator.
   • BThe businesses are all part of a single conglomerate.
   • CThe target business's domain is about to expire.
   • DThe target business is using a free DNS service.
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   An analyst is mapping the web infrastructure of a target business. The business's main domain resolves to an IP address that also hosts several unrelated domains. What does this indicate, and what is the best next step?

   • AThe domain is compromised; the analyst should alert the business immediately.
   • BThe business likely uses shared hosting; the analyst should examine the other domains on the same IP to find potential affiliations.
   • CThe business is using a CDN; the analyst should check the CDN provider's documentation.
   • DThe business has a dedicated server; the analyst should perform a vulnerability scan on the IP.
   Reveal Solution Discussion Select an answer first
5. 29expert · hard

   An investigator is trying to confirm the physical location of a business that claims to operate from a high-rise office building. The business's website lists the building's address, but the building's directory does not list the business. What is the best way to resolve this discrepancy?

   • ASearch for the business's name in the building's lease records.
   • BAssume the business is operating there and close the investigation.
   • CContact the building's management to ask if the business is a tenant.
   • DUse geolocation and street view to check for signage, and search for any business registration that lists a different operational address.
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   An investigator is trying to confirm that a business actually operates from a listed address. The address appears to be a residential property. What is the best way to verify the business's physical presence?

   • ASearch the property's tax records to see if the owner is the business.
   • BCall the business phone number and ask if they are at that location.
   • CUse street view imagery and geolocation tools to see if the property shows business signage or activity.
   • DCheck the business's website for a 'Contact Us' page with a map.
   Reveal Solution Discussion Select an answer first