A. Using Google Dorking queries
B. Performing brute force attacks on business domains
C. Running phishing campaigns against employees
D. Using SQL injection attacks on business databases
A. Removing old job postings with sensitive information
B. Implementing cyber hygiene training for employees
C. Disabling all cloud-based applications
D. Publishing all security policies online
A. Report the issue to the business security team
B. Download the files for personal use
C. Ignore the discovery and move on
D. Sell the data on dark web marketplaces
A. Social media platforms ban all OSINT investigations
B. OSINT investigators can always legally access all private accounts
C. Personal data is never leaked from social platforms
D. Data may be deleted, altered, or made private before analysis
A. OpenCTI
B. Wireshark
C. Tor Browser
D. Kali Linux
A. Social media reports
B. Password cracking scripts
C. Reverse IP Lookup
D. Local firewall logs
A. Analyze WHOIS and DNS records
B. Perform SQL injection on the website
C. Run a brute-force attack on the admin panel
D. Contact the hosting provider for login access
A. Lack of publicly available data
B. Search engines blocking access to social media sites
C. Being unable to gather useful information
D. Accidentally exposing your identity to the target
A. To ensure the data is accurate and reliable
B. To minimize legal risks when gathering data
C. To avoid leaving traces in online investigations
D. To prevent social engineering attacks
A. Report it directly to the company's employees
B. Verify the source's credibility
C. Attempt to log into the affected accounts
D. Sell the information on a dark web forum
