Python for OSINT: Tools and Techniques GSOA Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   An OSINT analyst needs to monitor a public government website for new press releases every 30 minutes during business hours. The analyst wants to store the full HTML of each new page and maintain a log of when changes were detected. The solution must run even when the analyst's laptop is closed. Which approach best meets these requirements?

   • ARun a Python script locally using APScheduler to check the site every 30 minutes and write new HTML to a local folder.
   • BUse a local cron job that runs the script every 30 minutes and emails the analyst when a change is detected.
   • CDeploy the Python script to an AWS Lambda function triggered by a CloudWatch Events rule every 30 minutes, storing new HTML in S3 and logs in CloudWatch.
   • DWrite a Python script that runs once and uses a while loop with time.sleep(1800) to check the site indefinitely.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which HTTP header is commonly used to pass an API key or token for authentication in a Python requests call?

   • AAccept
   • BUser-Agent
   • CAuthorization
   • DContent-Type
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   An analyst is building a Python script that monitors several websites for changes and needs to store the collected data for later analysis. The analyst wants to keep a full history of each monitored page, including timestamps, and be able to query the data by date and URL. Which storage approach is the most appropriate?

   • AUse a SQLite database with tables for URLs, snapshots, and timestamps, and query with SQL.
   • BStore each snapshot as a separate JSON file named with the URL and timestamp in a folder structure.
   • CWrite each snapshot to a plain text file and keep a separate index file that maps URLs to filenames.
   • DAppend each new snapshot as a row in a CSV file with columns for URL, timestamp, and content hash.
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   An OSINT team runs a Python script that monitors 100 websites and stores snapshots in a PostgreSQL database. The team needs to retain data for at least 2 years for compliance, but the database is growing quickly and storage costs are increasing. The team wants to reduce storage costs without losing the ability to query historical data. Which approach is the most effective?

   • AStore only the content hash and timestamp in the database, and store the full HTML in compressed files in S3.
   • BKeep all data in the database but use a more expensive storage tier.
   • CStore only the first 100 characters of each page in the database.
   • DDelete snapshots older than 6 months from the database.
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   An OSINT analyst is building a Python script to collect data from a public API that has a rate limit of 100 requests per hour. The script also needs to collect data from a second API that has a rate limit of 1000 requests per hour. The analyst wants to minimize the total time to collect all data while respecting both rate limits. The script will run on a local machine. Which approach is most appropriate?

   • AUse threading to run the two API collection tasks concurrently, each with its own rate limiter.
   • BUse a single rate limiter for both APIs, set to the lower limit of 100 requests per hour.
   • CRun the two API collection tasks sequentially, waiting for the rate limit to reset if needed.
   • DUse asyncio to run the two tasks concurrently, but share a single rate limiter.
   Reveal Solution Discussion Select an answer first