Privacy and Operational Security Fundamentals GOSI Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   An OSINT analyst is investigating a case of online harassment. The analyst finds a public post that contains the victim's home address. The analyst wants to include this information in a report to law enforcement. Which action is most appropriate from a legal and ethical standpoint?

   • ADo not include the address in the report to avoid privacy concerns.
   • BInclude the address in the report, but redact it in any public-facing summaries.
   • CInclude the address only in a verbal briefing to law enforcement.
   • DPublish the address in a public report to raise awareness.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   In the context of OSINT, what does 'privacy' primarily refer to for an analyst?

   • AThe encryption of all data collected during an investigation
   • BThe legal right of individuals to control their personal information
   • CThe ability to access any public information without restriction
   • DThe protection of the analyst's identity, methods, and sources from unintended disclosure
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which of the following best describes the core principle of OPSEC?

   • AIdentifying and controlling information that could reveal critical activities
   • BCollecting as much information as possible about a target
   • CEnsuring all team members use the same online aliases
   • DUsing encryption for all communications
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which of the following is an example of adhering to ethical boundaries in OSINT?

   • AHacking into a private database to obtain information
   • BCollecting data that is publicly accessible without bypassing access controls
   • CUsing social engineering to trick a target into revealing information
   • DCreating a fake social media profile to befriend a target
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   An OSINT analyst needs to send a sensitive file to a colleague in another country. The file contains the identities of confidential sources. Which method is most secure for transferring the file?

   • ACompress the file into a ZIP archive and send it via a messaging app without encryption.
   • BUpload the file to a public cloud storage service and share the link with the colleague.
   • CEncrypt the file with a strong password and send it via a secure file-sharing service that uses end-to-end encryption.
   • DSend the file as an email attachment with a standard email service that uses TLS.
   Reveal Solution Discussion Select an answer first