OSINT Methodology GOSI Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   An analyst is compiling a report on a company's data breach. The analyst has three sources: a tweet from an unknown user, a blog post from a cybersecurity researcher, and an official statement from the company. The tweet and blog post agree on the breach, but the company denies it. What is the most appropriate way to present this in the report?

   • AReport the breach as confirmed because the blog post is from a researcher.
   • BState that the breach occurred because two sources agree.
   • CIgnore the company's denial because it is self-serving.
   • DPresent the company's denial as the official position and note the conflicting reports with low confidence.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   An analyst is investigating a suspected money laundering operation. The analyst needs to find corporate registrations, property ownership, and court records. Which category of OSINT sources is most appropriate?

   • APublic records and government databases
   • BDark web forums
   • CSocial media platforms
   • DNews media archives
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   An OSINT analyst has produced a report on a potential supply chain vulnerability. The report includes a detailed analysis and recommendations. The client requests that the report be shortened to one page for executive review. What is the best approach?

   • ASend the full report and let the executives read it.
   • BProvide a one-page executive summary with key findings and recommendations.
   • CShorten the report by removing all source citations.
   • DRefuse to shorten the report because it would lose critical details.
   Reveal Solution Discussion Select an answer first
5. 24expert · hard · select all that apply

   An OSINT analyst is preparing a final report for a client. The report should be actionable and clear. Which elements should be included in the report? Select all that apply.

   • AAll raw data collected, without analysis.
   • BRecommended actions based on the analysis.
   • CA detailed explanation of every search query used.
   • DSource citations for the information used.
   • EA summary of key findings.
   Check answers Discussion Select an answer first
6. 25foundation · easy

   What is a key characteristic of an effective OSINT report?

   • AIt includes every piece of raw data collected during the investigation.
   • BIt presents findings in a clear, concise, and actionable manner.
   • CIt uses technical jargon to demonstrate expertise.
   • DIt focuses on the collection process rather than the analysis.
   Reveal Solution Discussion Select an answer first