Investigating People GOSI Practice Questions (Page 8)

Questions 36–40

1. 36foundation · easy

   An analyst uses a tool to upload a photo and find other instances of the same image online. Which technique is the analyst using?

   • AUsername correlation
   • BPeople search
   • CReverse image search
   • DMetadata extraction
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   An analyst examines a target's public check-ins and geotagged posts to determine where the target has been. Which OSINT activity is this?

   • AGeolocation and movement tracking
   • BSocial media profiling
   • CIdentity resolution
   • DImage analysis
   Reveal Solution Discussion Select an answer first
4. 38application · medium

   A security team is investigating a potential insider threat. They have identified a username 'shadow_walker' on a company forum and suspect it belongs to an employee named Alex. Alex is known to use the handle 'alex_walker' on public platforms. Which technique would best confirm the link between the two usernames?

   • AUse a username aggregator to see if 'shadow_walker' is registered on other platforms and compare the profile details with Alex's known 'alex_walker' accounts.
   • BLook for a common email address or phone number in the registration details of both accounts, if any are publicly exposed.
   • CSearch for the exact string 'shadow_walker' on a search engine and look for any profiles that also mention 'alex_walker'.
   • DCheck if both usernames have the same password hash in a public breach database.
   Reveal Solution Discussion Select an answer first
5. 39expert · hard

   A threat intelligence analyst is investigating a persona that posts extremist content on a niche forum. The persona uses the handle 'lone_wolf_88'. The analyst has found a Twitter account with the same handle that posts similar content, but the profile picture is a cartoon wolf. The analyst also has a photo from the forum that appears to show the person's face. Which combination of techniques would most conclusively link the forum persona to the Twitter account?

   • APerform a reverse image search on the forum photo to see if it appears on the Twitter account or elsewhere, and analyze the linguistic style of posts on both platforms.
   • BCompare the EXIF data of the forum photo with the EXIF data of photos posted on the Twitter account.
   • CSearch for the handle 'lone_wolf_88' on a username aggregator and compare the registration dates of the accounts.
   • DUse a people search engine to look up the email address associated with the forum account and see if it is linked to the Twitter account.
   Reveal Solution Discussion Select an answer first
6. 40expert · hard

   An investigator is mapping the network of a subject who is a mid-level manager at a tech company. The subject's LinkedIn shows connections to several employees at a competitor. The investigator wants to determine if these connections are professional or personal. Which combination of data would be most useful?

   • AThe subject's job title and the competitor's industry.
   • BThe subject's profile photo and the competitor employees' profile photos.
   • CThe number of connections the subject has and the total employees at the competitor.
   • DThe subject's public posts mentioning the competitor employees, shared group memberships, and event attendance records.
   Reveal Solution Discussion Select an answer first