Investigating People GOSI Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   An analyst is investigating a subject who uses the handle 'Ghost_Rider' on a motorcycle forum. The analyst finds a Twitter account with the same handle, but the Twitter account posts about cybersecurity, not motorcycles. The analyst also finds a GitHub account with the handle 'ghostrider-dev'. Which hypothesis is most plausible?

   • AThe Twitter account may be a different person who coincidentally uses the same handle, while the GitHub account may be the same person due to the '-dev' suffix.
   • BThe GitHub account is definitely the same person because it contains 'ghostrider'.
   • CThe Twitter account is definitely the same person because the handle is identical.
   • DThe forum and Twitter accounts are the same person because they share the same handle, and the GitHub account is unrelated.
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   An investigator has a target's phone number and email address. The target is privacy-conscious and has used a VPN and temporary email services. The investigator needs to find the target's real name and physical address. Which approach would be most effective?

   • AUse a combination of reverse phone lookup, email breach data, and people search engines to cross-reference any available data points.
   • BUse the email address to search for public data breaches and look for any associated usernames or passwords.
   • CSearch for the phone number and email address on social media platforms to see if they are linked to any public profiles.
   • DSearch for the phone number on a reverse phone lookup service and then search for the associated name on a people search engine.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is the primary goal of relationship and network mapping in an OSINT investigation?

   • ATo reveal the target's social and professional connections
   • BTo analyze the target's posting habits
   • CTo determine the target's physical location
   • DTo identify the target's online usernames
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which of the following is a common open source technique for investigating an email address?

   • AUsing a reverse image search on the email address
   • BChecking the email address against a database of IP addresses
   • CSearching the email address on search engines and social media to find associated accounts
   • DUsing a geolocation tool to find the email's physical origin
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   An investigator is looking into a subject who has changed their name and moved to a new city. The subject has deleted their old social media accounts and uses a new email address. The investigator has the subject's old name and the city they used to live in. Which approach would be most effective in finding the subject's new identity?

   • ASearch for the subject's old name on public records websites to find any recent legal name changes.
   • BUse the Wayback Machine to access archived versions of the subject's old social media profiles and look for any mentions of a new name or location.
   • CCombine searches for the old name on people search engines, public records, and web archives to find any links to the new identity.
   • DSearch for the subject's old name on a people search engine and look for any records that mention a name change.
   Reveal Solution Discussion Select an answer first