LOT-X-O-26-04 Module 1

The GDPR is just a regulation and is not a law. True or False?

True

False

An OSINT investigation process should have a documented Lawful Basis. When should the documentation be prepared?

a) Before processing begins

b) At any time, it doesn't matter when

c) During the reporting process

d) At the end of the investigation process

e) When the report is finished

An OSINT practitioner needs a Lawful Basis for the authority to

a) start an OSINT investigation

b) process Personally Identifiable Information

c) comply with The Data Protection Act 1998

d) get an exemption for an OSINT investigation

e) none of the above

You have been asked by your HR department if, without any consent, you can, 'check out the social media' of 3 prospective employees who are on a short-list. The GDPR Alternative you will rely on for lawful processing of their PII, is:

a) a Contract between the parties

b) Public Task

c) Vital Interests

d) Legitimate Interests

e) None of the above

Before commencing an OSINT process, it is best practice to:

a) Ensure that you are working from a non-attributable computer

b) Activate a VPN or Mobile Proxy connection

c) Activate an Agent Switcher

d) Ensure the Browser is up-to-date

e) All of the above

Which resource has the capability to obfuscate the internet finger print of an OSINT Practitioner?

a) A VPN

b) An Anonymiser or Proxy

c) A Mobile Proxy

d) An Agent Switcher

e) All of the above

A VPN will obfuscate the internet footprint of an OSINT Practitioner. It should be used when processing...

a) Facebook

b) YouTube

c) X (Twitter)

d) A website

e) None of the above

What is the purpose of a Processing Persona?

a) to protect the identity of the OSINT practitioner

b) to Protect the identity of the organisation that employs the OSINT practitioner

c) to protect the investigation itself

d) all of the above

e) There is no purpose. A Processing Persona is illegal and should never be deployed

After an OSINT Practitioner has deployed a Processing Persona and accessed Facebook, to look a specific user account and subsequently, Facebook recommends the PP to the user as a 'friend' and the User sends to the PP a connect request. The OSINT Practitioner should accept the request. True or False?

True

False

To make a secure record of the investigation process, it is essential to make a video screen recording of the investigation. True or False?

True

False

LOT-X-O-26-04 Module 1

Legislation & Operational Security

The GDPR is just a regulation and is not a law. True or False?

An OSINT investigation process should have a documented Lawful Basis. When should the documentation be prepared?

An OSINT practitioner needs a Lawful Basis for the authority to

You have been asked by your HR department if, without any consent, you can, 'check out the social media' of 3 prospective employees who are on a short-list. The GDPR Alternative you will rely on for lawful processing of their PII, is:

Before commencing an OSINT process, it is best practice to:

Which resource has the capability to obfuscate the internet finger print of an OSINT Practitioner?

A VPN will obfuscate the internet footprint of an OSINT Practitioner. It should be used when processing...

What is the purpose of a Processing Persona?

To make a secure record of the investigation process, it is essential to make a video screen recording of the investigation. True or False?