GOSI 試験問題を無料オンラインアクセス

Scenario: A cybersecurity team is conducting OSINT research on a business and finds company-related leaked credentials on a dark web forum.
What should be the next step?

• A.Use the credentials for further penetration testing
• B.Notify the company and advise password resets
• C.Publicly disclose the breach without company consent
• D.Share the credentials with competitors

Scenario: An OSINT investigator finds a misconfigured cloud storage bucket containing business financial records.
What should they do?

• A.Report the issue to the business security team
• B.Sell the data on dark web marketplaces
• C.Ignore the discovery and move on
• D.Download the files for personal use

Which of the following techniques is used to extract metadata from files?

• A.Shodan
• B.Wireshark
• C.Nmap
• D.ExifTool

Which tool is commonly used for automating OSINT collection?

• A.John the Ripper
• B.Burp Suite
• C.Metasploit
• D.SpiderFoot

What are two best practices when handling sensitive OSINT data? (Choose two)

• A.Encrypting research files before storing them
• B.Backing up all OSINT data to a public cloud
• C.Using disposable virtual machines (VMs) for investigations
• D.Using personal email accounts for data retrieval