OSINT Data Collection Tools and Techniques 3

Question 1

What distinguishes 'active' OSINT collection from 'passive' OSINT collection?

Accepted Answer

Active collection involves direct interaction with the target's systems; passive does not

Answer

Active OSINT involves direct interaction with the target (e.g., DNS queries, port scans), which may leave traces, whereas passive relies solely on third-party or cached data.

Question 2

Which Wayback Machine URL parameter retrieves the most recent available snapshot of a given page?

Accepted Answer

web.archive.org/web/*/example.com

Answer

Using a wildcard (*) in the Wayback Machine URL path displays all available snapshots, from which the most recent can be selected.

Question 3

An analyst uses Recon-ng to collect data. What type of architecture does Recon-ng use to extend its capabilities?

Accepted Answer

A modular framework where individual modules handle specific data sources

Answer

Recon-ng is a modular framework similar to Metasploit where individual modules are loaded to query specific data sources.

Question 4

What is the primary purpose of using a VPN or Tor when performing OSINT data collection?

Accepted Answer

To mask the analyst's IP address and reduce the risk of detection or attribution

Answer

VPNs and Tor anonymize the analyst's source IP, reducing the chance that the target or intermediaries can attribute the collection activity.

Question 5

Which metadata standard commonly embedded in JPEG images can reveal GPS coordinates, device model, and timestamp?

Accepted Answer

EXIF (Exchangeable Image File Format)

Answer

EXIF metadata embedded in JPEG images often contains GPS coordinates, camera model, and capture timestamp useful for OSINT geolocation.

(OSINT) Open Source Intelligence Certification Practice Test

(OSINT) Open Source Intelligence Certification Practice Test

OSINT Data Collection Tools and Techniques 3