312-85 · Question #22
An analyst is conducting threat intelligence analysis in a client organization, and during the information gathering process, he gathered information from the publicly available sources and analyzed…
The correct answer is C. OSINT. OSINT (Open Source Intelligence) is correct because it is defined as intelligence collected from publicly available sources - including websites, social media, news outlets, government reports, and public databases - and is widely used for national security, law enforcement…
Question
An analyst is conducting threat intelligence analysis in a client organization, and during the information gathering process, he gathered information from the publicly available sources and analyzed to obtain a rich useful form of intelligence. The information source that he used is primarily used for national security, law enforcement, and for collecting intelligence required for business or strategic decision making. Which of the following sources of intelligence did the analyst use to collect information?
Options
- AOPSEC
- BISAC
- COSINT
- DSIGINT
How the community answered
(17 responses)- B6% (1)
- C88% (15)
- D6% (1)
Explanation
OSINT (Open Source Intelligence) is correct because it is defined as intelligence collected from publicly available sources - including websites, social media, news outlets, government reports, and public databases - and is widely used for national security, law enforcement, and strategic business intelligence, which matches the scenario exactly.
OPSEC (Operations Security) is a process or methodology for protecting sensitive information from adversaries, not a source of intelligence gathering - it's about preventing information leakage, not collecting it.
ISAC (Information Sharing and Analysis Center) is a sector-specific, membership-based organization (e.g., FS-ISAC for financial services) that shares threat intelligence among trusted members, making it a restricted source, not a publicly available one.
SIGINT (Signals Intelligence) involves intercepting electronic signals and communications (e.g., phone calls, radar emissions) - it requires specialized technical collection methods and is not derived from open/public sources.
Memory tip: Think of OSINT as "Open = Open to the public." If you can Google it, it's likely OSINT. The "OS" stands for Open Source, reminding you the data is openly accessible - no wiretaps, no memberships, no classified access required.
Topics
Community Discussion
No community discussion yet for this question.