Investigating People GOSI Practice Questions (Page 9)

Questions 41–45

1. 41expert · hard

   An investigator is trying to locate a subject who has taken steps to remove their personal information from people search engines. The subject has a common name, and the investigator has a phone number that may be outdated. The subject is known to have recently moved to a new city. Which strategy would be most effective in finding the subject's current address?

   • AUse the subject's name and known city to search for recent property records, voter registrations, and utility records.
   • BUse a people search engine that specializes in aggregating data from data breaches and public records.
   • CSearch for the subject's name on social media and look for any posts that mention their new city or show geotagged photos.
   • DSearch for the subject's phone number on a reverse phone lookup service and then search for any associated addresses on public records.
   Reveal Solution Discussion Select an answer first
2. 42application · medium

   An analyst is trying to determine where a subject was on a specific date. The subject's social media shows no posts that day, but the analyst finds a photo posted a week later that appears to be from a location with a distinctive landmark. Which technique would best help confirm the subject's location on the target date?

   • AUse the Wayback Machine to see if the subject's location-based app check-ins are archived.
   • BReverse image search the photo to find other posts from the same location on the target date.
   • CLook at the subject's friends' posts from the target date to see if they mention the subject.
   • DCheck the photo's EXIF metadata for GPS coordinates and the timestamp.
   Reveal Solution Discussion Select an answer first
4. 43expert · hard

   An analyst is investigating a person who uses the handle 'SkyWatcher' on a photography forum. The analyst finds a Flickr account with the same handle that posts photos of the same city. However, the Flickr account's email address is linked to a different name. The analyst also finds a LinkedIn profile for that different name in the same city. Which conclusion is most defensible?

   • AThe Flickr account and LinkedIn profile likely belong to the same person, and the forum handle may be a pseudonym.
   • BThe LinkedIn profile is unrelated because the name is different from the forum handle.
   • CThe Flickr account is a fake account created to impersonate the forum user.
   • DThe forum and Flickr accounts are definitely the same person because they share the same handle.
   Reveal Solution Discussion Select an answer first
5. 44foundation · easy

   Which of the following best describes the goal of open source identity resolution?

   • ATo analyze the content of a person's social media posts for behavioral traits
   • BTo determine the physical location of a person at a specific time
   • CTo consolidate multiple online personas and accounts into a single identity
   • DTo identify the relationships between a target and their associates
   Reveal Solution Discussion Select an answer first
6. 45application · medium

   A corporate investigator is mapping the professional network of a former employee who is now suspected of leaking data. The investigator has the employee's name and previous job title. Which approach would most efficiently reveal the employee's current professional connections?

   • ACheck the employee's personal blog for a list of professional contacts.
   • BSearch LinkedIn for the employee's profile and review their current connections, groups, and employer.
   • CSearch public court records for the employee's name to find associates.
   • DUse a people search engine to find the employee's home address and then look for neighbors.
   Reveal Solution Discussion Select an answer first