Final Exam BOOT-R-A-22-09

Mod1. Q1. Which of the following are not OSINT resources?

Mod1. Q2. Evidence captured from the internet is always admissible in a court of law?

Mod2. Q3. Under GDPR and prevailing Data Protection legislation of EEA countries, when a data breach occurs, the country Data Protection authority should be notified of the breach within:

Mod2. Q4. An OSINT practitioner in the UK is tasked to investigate the activities of a Chinese citizen who is normally resident in Shanghai and is visiting London on a purported vacation. There has been a report of possible criminal activity on the part of the Chinese citizen. Concerning Social Media accounts of the subject, the practitioner can:-

Mod3. Q5. A 'Free' VPN is not recommended because activity is recorded and monetised by the provider?

Mod3. Q6. With regard to Passwords, it is best practice to:

Mod3. Q7. What is an Emulator?

Mod4. Q8. When using a photograph for a Synthetic Identity, it's best practice to:

Mod4. Q9. Maintaining a Synthetic Identity is never a good idea. Better to create a new Synthetic Idendity for every deployment.

Mod5. Q10. POLE is an investigation structure acronym that does not include:


Mod5. Q11. Positive identifiction of Subject is not essential. It is safe to 'follow your gut' based on your experience as an OSINT practitioner.

Mod5. Q12. Where the instruction defines the scope of the investigation to process a Subject, the OSINT report should not include:

Mod6. Q13. On some occasions, an IP (Internet Protocol) address relating to a subject's internet use might assist an OSINT investigation?

Mod6. Q14. Concerning devices connected to the Internet of Things, which answer is most accurate?

Mod6. Q15. Why is it necessary to record a numeric account ID?

Mod7. Q16. If there was a Russian element to your investigation, which of the following search engines should you consider using;

Mod7. Q17. Which of the following is not a private search engine:

Mod7. Q18. In Google, where would you find the calendar to search on a specific or custom time frame?

Mod7. Q19. With a search engine such as Google, to search for a person with the name, Gemma Philips and who might work as a translator and who might have a LinkedIn profile; which is the most appropriate search query?

Mod8. Q20. Which of the following is a reverse image search site?


Mod8. Q21. What most accurately describes a digital Thumbnail?

Mod8. Q22. One week from now, by road you plan to travel from the main railway station in Leicester to the Railway station at Bearsted, Maidstone. What is the distance, by road?

Mod8. Q23. Deploy https://zoom.earth and measure the area from Blackpool to Leeds to Sheffield to Liverpool to Blackpool. In square miles, it is approximately?

Mod9. Q24. In most instances, an email header should be read from:

Mod9. Q25. An email header may contain:

Mod9. Q26. UTC is the abbreviation for:

Mod9. Q27. A communication application such as WhatsApp will have the same user information displaying in the Desktop version & Mobile version

Mod10. Q28. What basic principles do all social media platforms use to identify a user?

Mod10. Q29. If a LinkedIn account is located by way of a search engine, to view the account, it is best practice to:

Mod10. Q30. LinkedIn searches cannot be filtered by:


Mod10. Q31. What does the blue tick badge indicate on a Twitter users account?

Mod10. Q32. With help from some of the Twitter Account ID links on uk-osint.net; what is the Twitter Account Name linked to the Twitter Account ID Number of 18953259?

Mod11. Q33. Under the Human Rights Act 1998, no video platform is permitted to display violent or extremist content in the UK

Mod11. Q34. To acquire a Flickr Account ID, search the source code with:

Mod11. Q35. For Instagram, which is correct?

Mod11. Q36. YouTube video uploads might not display:

Mod11. Q37. On TikTok, which resource cannot be deployed to download a video?

Mod12. Q38. When trying to locate the UserID of a Facebook user, the OSINT practitioner should access the Page Source from the:

Mod12. Q39. Facebook account UserIDs’. Which is true?

Mod12. Q40. From the Facebook account of Nick Gargan who lives in York, how many Facebook Friends does the account holder have, with a surname of Gargan?


Mod12. Q41. True or False? On Facebook, it should be anticipated that Facebook will record that your account as having “looked at" in a subject’s profile.

Mod12. Q42. Which is correct? The social media platform OK (Odnoklassniki), can be searched:

Mod13. Q43. You are a journalist researching Donald Trump Jr. (selected only as a good training example). You are reasonably sure he lives in Trump Tower on 5th Avenue New York, but the building has 64 floors. You want to know which floor he lives on. From his Facebook page you know that he files small aircraft. You access https://amsrvs.registry.faa.gov/airmeninquiry/main.aspx. Your research indicates that he does indeed live in Trump Tower, and he resides on the:-

Mod13. Q44. To locate an aircraft with Registration mark G-BPZB, search for the Civil Aviation Authority (UK) website. What is the make and model of the aircraft?

Mod13. Q45. A member of the public reports that they know for a fact that a doctor who is treating members of the public and was registered with the General Medical Council does not have a licence to practice. The doctor is called Matthew TYSON. Your investigation concludes that the allegation is:

Mod13. Q46. The son of an elderly woman living in Cardiff had hired a carer to visit his mother each day. He reports that several valuable items have been stolen from the property. He reports that the carer is called Lili Binyon. Your initial enquiries cannot locate a person called Binyon so you access https://socialcare.wales You discover that the carer:-

Mod14. Q47. Concerning Reddit, which is correct?

Mod14. Q48. Using redective.com what is the timestamp of the creation of the Reddit Community reddit.com/r/DanBongino

Mod14. Q49. Following a search on TripAdvisor for the user name MizJordo, a review of the DoubleTree by Hilton Hotel New York Times Square West, can be located. On May 18, 2018 what was the name of the General Manager?

Mod14. Q50. Locate the profile of the user AdrianM on TripAdvisor. In March 2022 how did Adrian report that he had travelled to Patong Beach. On


Mod15. Q51. Only the top 5 cryptocurrencies deploy the Blockchain?

Mod15. Q52. A Crypto-wallet can

Mod15. Q53. The Dark Web and the TOR Network are the same thing

Mod15. Q54. Which is correct? A web site on the Dark Web...

Mod16. Q55. haveibeenpwned.com indicates that the hotmail.com account of user boulliebeest was compromised in an Adobe.com breach. What personal data was probably not compromised?

Mod16. Q56. The data breach resource haveibeenpwned.com indicates no breach for the yahoo.com account of mikemeissner10 on which of the five platforms listed below?

Mod16. Q57. On 17 January 2019 what was a password deployed by the gmail user anthony.d.jackman that was published by the data breach resource IntelligenceX ?

Mod16. Q58. On the resource IntelligenceX a search query with the email address conlan697@btinternet.com provides a summary of 29 data dumps. How many were in 2021?

Mod17. Q59. Command line tools only work in a Browser

Mod17. Q60. In general, it is preferable to perform command line OSINT processes on which operating system?