Final Exam BOOT-U-X-21-01

1. During an OSINT investigation, an IP address can only be of value to a Law Enforcement Officer. OSINT researchers in the private sector, cannot research IP addresses.

a) True

b) False

2. Which of the following should not be included in an OSINT report?

a) The subjects Personal details & recent photograph

b) Details of the investigators false persona

c) Details of close family and friends

d) Details of any social media accounts

e) Details of any relevant online posts

3. Data from which sources is OSINT?

a) Hacking / Blagging

b) Cell Site Analysis

c) Data on local computers in public libraries

d) Mobile Devices

e) All of the above

4. The GDPR and legislation that derives from it, will not impose financial penalties on:

a) Law Enforcement and Wider Public Authorities

b) Private sector Corporate entities

c) Registered private detectives

d) a private individual

5. The GDPR and the Data Protection Act 2018 both require a researcher to apply the 'Proportionality Test'. The test is....

a) Do the individual's interests diminish, as the value of the illegal activity increases?

b) The individual's interests are affected by the seriousness of the offence.

c) Do the individual's interests override the legitimate interest?

d) The legitimate interest of the individual has to be proportionate and equal to the interest of the researcher.

e) Every researcher should seek the advice of their legal department to determine proportionality.

6. For an OSINT researcher, it is essential for an effective False Persona to have:-

a) an e-mail address that can be accessed by the researcher

b) a name

c) a date of birth

d) a photograph

e) all of the above

7. An OSINT researcher cannot ever use a False Persona that might have the name of a real person?

a) True

b) False

8. When using a photograph for a False Persona, it's best to:

a) Use a photo for a real person, without their permission

b) Generate a photo with an online application

c) Use a photo of a real person, but to get their permission

d) Generate an avatar that can't be attributed to anyone

e) None of the above

9. An Anonymizer and a VPN are the same thing?

a) True

b) False

10. A computer footprint might display the user's:

a) IP address

b) Internet Service Provider (ISP)

c) Approximate location by Latitude and Longitude

d) the Operating system of the user's computer

e) all of the above

11. With regard to Passwords, you should:

a) Let a trusted person have your password in case you forget it

b) Use the same password for everything

c) Choose a long word from the dictionary

d) Use a password generator

e) Safely store a written copy of your passwords

12. To whom might we make an application to supply registration details if it was a lawful and reasonable request?

a) Namesco

b) ICANN

c) Nominet

d) Your SPoC

e) EUNIC

13. Using the Wayback Machine at https://web.archive.org search for the website http://www.fezn247.com/ and view how it appeared in April 2013. Identify which of the following does not display under the Latest News section?

a) Award Winning

b) Increased Profitability

c) Accreditation

d) Expansion

e) All of the above

14. From the Wikipedia website, locate the official website for Liverpool Football Club and then check the Domain Name at https://domainbigdata.com/ - when was the Domain Name first Registered?

a) 4 March 2015

b) 3 April 2015

c) 20 April 1997

d) 4 October 1997

e) 23 September 1997

15. What does the “ “ symbol do?

a) Returns details of what a person has been quoted to say online.

b) Returns only results concerning names of subjects

c) Filters text from numerics

d) Returns only details of the exact search criteria

16. With a search engine such as Google, to search for an individual by the name of Richard Lewis, a blogger and author who lives in Belfast, which is the most appropriate search string?

a) “richard lewis” blogger OR author AND belfast

b) “richard lewis” AND author AND belfast

c) “richard lewis” blogger OR author belfast

d) richard lewis writer AND Belfast

e) richard lewis blogger author belfast

17. If there was a Russian element to your research, which of the following search engines should you consider using;

a) Google only

b) Google & Bing

c) Google & Yandex

d) Google & Baidu

e) Google & VK

18. What is the benefit of using a Meta Search engine?

a) It searches deeper in to the internet

b) It returns more precise results

c) It searches across a number of websites at the same time

d) It affords greater security to the researcher

19. Why is it necessary to record an account ID number?

a) In case the subject deletes the account

b) In case the subject changes their email address

c) In case the subject changes their name

d) In case the subject changes their phone number

e) In case the subject their Vanity name

20. If a LinkedIn account is located by way of a search engine, to view the account, it is best practice to:

a) click on the link and the view the account

b) click the link and login with your own account

c) click the link and access the account with a False Persona

d) there is no best practice, as it is not possible

e) none of the above

21. LinkedIn Footprints & User Settings. Which is true?

a) A LinkedIn User can select to setting to show who has visited their account

b) Only a Premium LinkedIn account holder can view people who have visited their account

c) A User can select a setting to prevent the holder’s of accounts from seeing that a user has visited another person’s account

d) Only a Premium LinkedIn account holder can select a setting to prevent the holder’s of accounts from seeing that the Premium user has visited another person’s account

e) All of the above

22. To acquire a Flickr Account ID, search with the:

a) idGettr

b) UserID

c) AccountID

d) GetID

e) None of the above

23. Using the links for Flickr on the Photo Upload & Search page of uk-osint.net, what is the Flickr Account ID Number linked to the account at: https://www.flickr.com/photos/westmidlandspolice ?

a) westmidlandspolice

b) westmidlandspolice61718807

c) 61718807

d) 61718807@N07

e) None of the above

24. What basic principals do all social media platforms work on?

a) Username / Email address / Telephone number

b) Real name / Mobile number / Contacts

c) Email address / Nationality / Hobbies

d) Updates / Location / Phone number

25. From the Facebook account of Nick Gargan, who lives in York, how many Facebook Friends does the account holder have, with a surname of Gargan?

a) less than 5

b) between 5 - 10

c) between 11 - 15

d) between 16 - 20

e) more than 21

26. In Facebook, which of the following techniques will allow you to see a much larger version of a Private Profile image?

a) Click on the profile image

b) Right click on the profile image and select, ‘View Image’

c) Right click on the profile image and select, ‘Open Link in New Tab’

d) Right click on the profile image and select, ‘View Image’ and keyboard select Ctrl +

e) all of the above

27. Concerning Reddit, which is not correct:

a) Reddit users might have a profile page

b) the platform can be searched with Google

c) To search Reddit, you must be logged in

d) Reddit has over 300 million users

e) none of the above

28. Facebook account UserIDs’. Which is true?

a) As an OSINT researcher, obtaining the UserID of a Facebook account is optional

b) If a Facebook user changes their account name, the UserID will change as well

c) The Facebook UserID is the same as the Facebook Account name

d) If a Facebook user changes their account name, the UserID will not allow you to identify their account

e) None of the above

29. Which is not correct. OK can be searched:

a) without logging in as a user

b) only when logged in

c) with a Google ‘site:’ search

d) in the Google cache

e) none of the above

30. We want to know what vehicles might have been driven in 2019 and 2020 by our subject Richard Garrett (aka Ricky) (who has been selected only as a good training example) and who lives in London, UK. First, access https://londontribunals.org.uk/ and search for our subject. Using data located, access https://vehicleenquiry.service.gov.uk/ to locate any vehicle(s). Our research has determined that our subject has driven a:-

a) a black VW first registered in 2017

b) a blue BMW first registered in 2018

c) a red KIA first registered in 2019

d) a grey Audi first registered in 2020

31. You are a journalist researching Donald Trump Jr.(selected only as a good training example). You are reasonably sure he lives in Trump Tower on 5th Avenue New York, but the building has 64 floors. You want to know which floor he lives on. From his Facebook page you know that he files small aircraft. You access https://amsrvs.registry.faa.gov/airmeninquiry/main.aspx. Your research indicates that he does indeed live in Trump Tower, and he resides on the:-

a) 61 Floor

b) 56 Floor

c) 52 Floor

d) 25 Floor

e) None of the above

32. When researching Blog Sites and other Forums what should you be searching for to assist your research?

a) Account/Screen name(s)

b) Profile Images/Avatars

c) Links to social media accounts

d) Historic Postings

e) All of the above

33. Why might you want to capture a gaming site avatar or profile picture.

a) It can be used to carry out a reverse image search to identify any linked online sites.

b) It will have exif data embedded in the image.

c) It is a unique image used only on this site.

d) It can be used to carry out a reverse image search to identify the exact location the account was created.

34. What is DoneDeal?

a) An online dating website.

b) An online marketplace focused on buying and selling homes.

c) An online marketplace focused on helping buyers and sellers of cars in Ireland.

d) An online registered traders’ website.

35. Which of the statements is true with regards to Gumtree?

a) Seller / account holders phone number will always be viewable without logging on with a personal account.

b) Sellers never put their contact details in with the full item description.

c) Seller / account holders phone number is usually only viewable when you have logged on (with a free account).

d) None of the above.