NDIT Public Records and Open-Source Intelligence Research 5

Question 1

A commercial data aggregator report shows a criminal conviction for the subject. What should the investigator do before reporting it?

Accepted Answer

Verify it against the original court record

Answer

Aggregator data can be outdated or mismatched, so findings should be confirmed at the primary source, the courthouse record.

Question 2

In an online social media investigation, which action is generally lawful and ethical?

Accepted Answer

Viewing and preserving publicly available posts without interacting

Answer

Viewing and documenting content that is publicly available raises few legal or ethical problems, while deceptive access can violate ethics rules and law.

Question 3

When capturing a web page as evidence, which practice best supports authentication later?

Accepted Answer

Capturing the page with the URL, date/time, and a hash value, and logging the capture

Answer

Recording the URL, timestamp, and a hash value along with chain-of-custody notes helps show the capture is authentic and unaltered.

Question 4

A records search for "John Smith" returns several hits. What is the best way to confirm which record belongs to the subject?

Accepted Answer

Match multiple identifiers such as date of birth, address history, and middle name

Answer

Positive identification needs several matching identifiers, because a name alone is not enough to avoid false attribution.

Question 5

Websites ending in .onion are accessed through which network?

Accepted Answer

Tor

Answer

The .onion domains are Tor hidden services, reachable only through the Tor network.

NDIT - National Detective/Investigator Test Practice Test

NDIT - National Detective/Investigator Test Practice Test

NDIT Public Records and Open-Source Intelligence Research 5