LOT-X-O Module 1 - Legislation & Operational Security

The GDPR is just a regulation and is not a law. True or False?

True

False

An OSINT investigation process should have a documented Lawful Basis. When should the documentation be prepared?

a) Before processing begins

b) At any time, it doesn't matter when

c) Removes search terms that are regarded as irrelevant by Google

d) Auto applies extra characters and words from a Google knowledge base.

e) None of the above

An OSINT practitioner needs a Lawful Basis for the authority to

a) start an OSINT investigation

b) process Personally Identifiable Information

c) comply with The Data Protection Act 1998

d) get an exemption for an OSINT investigation

e) none of the above

You have been asked by your HR department if, without any consent, you can, 'check out the social media' of 3 prospective employees who are on a short-list. The GDPR Exemption you will rely on for lawful processing of their PII, is:

a) a Contract between the parties

b) Public Task

c) Vital Interests

d) Legitimate Interests

e) None of the above

The PII of a subject, that is good to have in the instruction at the start of an investigation, is ...? (select the best answer)

a) name

b) e-mail address

c) mobile number

d) date of birth

e) all of the above

Before commencing an III (OSINT) process, it is best practice to: (select the best answer)

a) Ensure that you are working from a non-attributable computer

b) Activate a VPN or Mobile Proxy connection

c) Activate an Agent Switcher

d) Ensure the Browser is up-to-date

e) All of the above

Which resource has the capability to obfuscate a user's internet finger print?

a) A VPN

b) An Anonymiser or Proxy

c) A Mobile Proxy

d) An Agent Switcher

e) All of the above

What is the purpose of a Processing Persona?

a) to protect the identity of the OSINT practitioner

b) to Protect the identity of the organisation that employs the OSINT practitioner

c) to protect the investigation itself

d) all of the above

e) There is no purpose. A Processing Persona is illegal and should never be deployed

An OSINT Practitioner cannot ever use a Processing Persona that has the name of a real world person. True or False?

True

False

With regard to Passwords, an OSINT Practitioner should:

a) Let a trusted person have your password in case you forget it

b) Use the same password for everything

c) Choose a long word from the dictionary

d) Use a password generator

e) Use a memorable password