LOT-X-R-24-07 Module 1 Legislation and Operational Security

The GDPR is just a regulation and is not a law. True or False?

True

False

The GDPR exemption that is Legitimate Interests is not safe to rely on, as the OSINT practitioner cannot demonstrate any real legitimate Interest to process the PII of a Subject. True or False?

True

False

Which resource has the capability to obfuscate a user's internet finger print?

a) A VPN

b) An Anonymiser or Proxy

c) A Mobile Proxy

d) An Agent Switcher

e) All of the above

A VPN will obfuscate a user internet footprint. It should be used when processing ..

a) Facebook

b) YouTube

c) X (Twitter)

d) A website

e) None of the above

A Synthetic Identity should have..

a) A first name and last name

b) Two e-mail addresses

c) A Date of Birth

d) A Vanity Name

e) Name of a relative

f) A Photo or Avatar

You have been asked by your HR department to 'check out the social media' of a prospective employee. The GDPR Exemption you will rely on for lawful processing of their PII, is:

a) a Contract between the parties

b) Public Task

c) Vital Interests

d) Legitimate Interests

e) None of the above

Your online fingerprint might disclose your.. ?

a) Browser type and version

b) Operating system and version

c) Screen resolution of your computer

d) Other applications installed on your computer

e) all of the above

To enhance the security of a VPN connection, you should...?

a) install an anti-virus application

b) delete the default network settings

c) apply the DNS of the VPN provider to your network settings

d) contact with tghe VPN provider to acquire a dedicated gateway (IP address)

e) none of the above

the PII of a subject that is good to have in the instruction, at the start of an investigation is ...?

a) name

b) e-mail address

c) mobile number

d) date of birth

e) all of the above

What is the purpose of a Synthetic Identity?

a) to protect the identity of the OSINT practitioner

b) to Protect the identity of the organisation that employs the OSINT practitioner

c) to protect the investigation itself

d) all of the above

e) There is no purpose. A Synthetic Identity is illegal and should never be deployed