OSINT Methodology GOSI Practice Questions (Page 10)

Questions 46–50

1. 46expert · hard · select all that apply

   An analyst is validating information about a company's financial status. They have found several sources. Which sources are generally considered reliable for corroboration? Select all that apply.

   • AReputable financial news outlets.
   • BAn anonymous post on a financial forum.
   • CA blog post by an unknown author.
   • DOfficial SEC filings.
   • EThe company's official press releases.
   Check answers Discussion Select an answer first
2. 47application · medium

   A company wants to conduct OSINT on a competitor's marketing strategy. The team plans to scrape the competitor's website and social media pages. Which consideration is most important?

   • AFocus only on social media because it is public.
   • BUse a VPN to hide the company's IP address.
   • CCollect as much data as possible to gain a competitive advantage.
   • DEnsure compliance with the website's terms of service and applicable laws.
   Reveal Solution Discussion Select an answer first
4. 48foundation · easy

   Which of the following is an example of a public record source commonly used in OSINT?

   • AA password-protected forum for cybersecurity researchers
   • BProperty tax assessment records
   • CA corporate VPN login page
   • DA private company's internal employee directory
   Reveal Solution Discussion Select an answer first
5. 49expert · hard

   An OSINT analyst is investigating a case of online harassment. The analyst has identified the harasser's social media account. To gather more evidence, the analyst considers creating a fake account to join a private group where the harasser is active. The analyst's organization has a strict policy against deceptive practices. What should the analyst do?

   • ARefrain from creating a fake account and rely on publicly available information from the harasser's public posts.
   • BAsk the harasser's platform for permission to create a fake account.
   • CCreate the fake account but only observe, not interact.
   • DCreate the fake account because the investigation is important.
   Reveal Solution Discussion Select an answer first
6. 50expert · hard

   An analyst is investigating a human trafficking ring. The analyst has identified a social media account that appears to be used for recruitment. The analyst wants to gather more evidence but is concerned about tipping off the suspects. Which source should the analyst use to gather additional information without alerting the suspects?

   • APublicly available government records and news archives.
   • BSend a friend request to the account from a fake profile.
   • CUse a social media monitoring tool that sends alerts to the account owner.
   • DDirectly message the account to ask for information.
   Reveal Solution Discussion Select an answer first