OSINT Methodology GOSI Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   An OSINT team is planning a collection effort for a corporate due diligence investigation. The team has defined the intelligence requirements and identified potential sources. What is the next step in the intelligence cycle?

   • ADisseminate the findings to stakeholders.
   • BCollect data from the identified sources.
   • CRe-evaluate the intelligence requirements.
   • DAnalyze the data that has already been collected.
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   An analyst is writing a report on a company's supply chain risks. They have information from a supplier's website, a news article, and a forum post. The forum post contradicts the other two sources. What should the analyst do?

   • AInclude the forum post as a dissenting opinion.
   • BSeek additional sources to corroborate or refute the forum post.
   • CReport the contradiction without further investigation.
   • DDiscard the forum post because it is less reliable.
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A security team is tasked with identifying potential insider threats. They have collected a large volume of social media posts and public records. According to the intelligence cycle, what should they do immediately after collection?

   • ARe-evaluate the collection plan based on initial findings.
   • BBegin writing the final intelligence report.
   • CDisseminate the raw data to management for review.
   • DProcess and organize the data into a usable format for analysis.
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   An analyst is preparing a threat intelligence report on a hacking group. They have information from a self-proclaimed hacktivist's Twitter account, a cybersecurity blog, and a government advisory. Which source should be given the most weight in the report?

   • AThe Twitter account, because it is the primary source.
   • BThe government advisory, because it is an official and authoritative source.
   • CAll sources should be given equal weight to avoid bias.
   • DThe cybersecurity blog, because it is widely read.
   Reveal Solution Discussion Select an answer first
6. 30expert · hard

   A security operations center (SOC) is integrating OSINT into its threat intelligence process. They have a continuous stream of data from multiple sources. The SOC manager wants to ensure that the intelligence cycle is followed efficiently. Which practice is most effective?

   • AAutomate the entire intelligence cycle to reduce manual effort.
   • BAutomate the collection phase and manually analyze the processed data.
   • CSkip the processing phase to speed up the cycle.
   • DDisseminate raw data directly to stakeholders to save time.
   Reveal Solution Discussion Select an answer first