Advanced Operational Techniques and Threats GSOA Practice Questions (Page 10)

Questions 46–46

1. 46application · medium

   An analyst is monitoring a dark web marketplace that sells stolen credentials. The analyst has identified a vendor who appears to be selling data that matches a recent breach. The analyst wants to gather intelligence on the vendor's activity without breaking the law or the marketplace's terms of service. Which action is most appropriate?

   • AContact the vendor directly and ask for a sample of the data to verify its authenticity.
   • BAttempt to exploit a vulnerability in the marketplace to access the vendor's private messages.
   • CRecord the vendor's public profile, listing descriptions, and any public Bitcoin addresses, and note the timestamps of the listings.
   • DPurchase a small amount of the stolen data to confirm the vendor's legitimacy and gather more details.
   Reveal Solution Discussion Select an answer first