Searching, Collecting, and Processing Data GOSI Practice Questions (Page 8)

Questions 36–40

1. 36application · medium

   An analyst is collecting data from a public forum that includes usernames, posts, and timestamps. The analyst plans to store this data in a local database for analysis. Which action is most important to ensure legal and ethical compliance?

   • ALimit collection to posts that are older than one year.
   • BReview the forum's terms of service and applicable privacy laws before collection.
   • CEncrypt the database to prevent unauthorized access.
   • DAnonymize usernames before storing the data.
   Reveal Solution Discussion Select an answer first
2. 37application · medium

   A threat intelligence team is monitoring a dark web forum for mentions of their organization. They need to collect posts daily and store them for future analysis while respecting the forum's terms of service. Which approach best balances systematic collection and legal/ethical compliance?

   • AManually visit the forum each day and copy relevant posts into a Word document.
   • BUse a scraper to download all posts and store them in a local database without any rate limiting.
   • CUse an API if available, with appropriate rate limits, and store the data in a structured format with timestamps and source URLs.
   • DSubscribe to a third-party service that archives the forum and provides a daily digest via email.
   Reveal Solution Discussion Select an answer first
4. 38foundation · easy

   Which organizational approach best supports the ongoing searchability of collected OSINT data?

   • AUsing a database with consistent metadata tags
   • BPrinting all data and filing it in physical binders
   • CStoring all data in a single, unstructured folder
   • DNaming files with random strings to avoid duplication
   Reveal Solution Discussion Select an answer first
5. 39expert · hard

   An OSINT unit is setting up a data repository that must comply with GDPR. The unit collects personal data from various sources and needs to ensure that data is stored securely and can be deleted upon request. What is the best approach?

   • AStore data in a spreadsheet with access controls and rely on manual deletion.
   • BStore data in a distributed system with no central control to avoid GDPR obligations.
   • CStore all data in a centralized database with encryption and implement a process for data deletion requests.
   • DStore data in a cloud service located outside the EU to avoid GDPR.
   Reveal Solution Discussion Select an answer first
6. 40application · medium

   An analyst is collecting data from a website that changes frequently. They need to capture the data at a specific point in time for later analysis. What is the best method to ensure the data is preserved as it appeared?

   • AUse a web archiving service or take a full-page screenshot with a timestamp and URL.
   • BBookmark the page in the browser for later reference.
   • CDownload the HTML source code and store it without any additional information.
   • DCopy and paste the text into a word processor document.
   Reveal Solution Discussion Select an answer first