LOT-X-R-24-07 Module 1 - Legislation & Operational Security

The GDPR is just a regulation and is not a law. True or False?

True

False

The GDPR exemption that is Legitimate Interests is not safe to rely on, as the OSINT practitioner cannot demonstrate any real legitimate Interest to process the PII of a Subject. True or False?

True

False

To process personal data of a subject without their consent, the practitioner might rely on a lawful basis that is:

a) The Right to Investigate Fraud

b) Legitimate Interest

c) The Basics of Legitimate Rights

d) The Right of Basic Interest

e) Interested Party Authority

An OSINT practitioner needs a Lawful Basis for the authority to

a) start an OSNT investigation

b) process Personally Identifiable Information

c) comply with The Data Protection Act 1998

d) get an exemption for an OSINT investigation

e) none of the above

You have been asked by your HR department if you can 'check out the social media' of 3 prospective employees on a short-list, without having to ask them. The GDPR Exemption you will rely on for lawful processing of their PII, is:

a) a Contract between the parties

b) Public Task

c) Vital Interests

d) Legitimate Interests

e) None of the above

the PII of a subject that is good to have in the instruction, at the start of an investigation is ...?]

a) name

b) e-mail address

c) mobile number

d) date of birth

e) all of the above

Which resource has the capability to obfuscate a user's internet finger print?

a) A VPN

b) An Anonymiser or Proxy

c) A Mobile Proxy

d) An Agent Switcher

e) all of the above

A VPN will obfuscate a user internet footprint. It should be used when processing ..

a) Facebook

b) YouTube

c) X (Twitter)

d) A website

e) None of the above

To enhance the security of a VPN connection, you should...?

a) install an anti-virus application

b) delete the default network settings

c) apply the DNS of the VPN provider to your network settings

d) contact with the VPN provider to acquire a dedicated gateway (IP address)

e) none of the above

What is the purpose of a Synthetic Identity?

a) to protect the identity of the OSINT practitioner

b) to Protect the identity of the organisation that employs the OSINT practitioner

c) to protect the investigation itself

d) all of the above

e) There is no purpose. A Synthetic Identity is illegal and should never be deployed