A cybersecurity firm is developing an AI to detect zero-day malware. They have a dataset of known malware and benign files, but zero-day malware is unknown. They want the model to flag files that are unusual or different from known benign files. Which approach is most appropriate?

Supervised classification with known malware labels

Anomaly detection using unsupervised learning

Deep learning with a convolutional neural network

A hospital is deploying an AI system to predict patient readmission risk. The model is trained on historical patient data, but the hospital's patient demographics have changed over time. The model's performance degrades because the new patient population differs from the training data. What is the most effective way to address this issue?

Switch to a rule-based system based on clinical guidelines

Reduce the number of features to simplify the model

Use a more complex model to fit the original data better

Regularly retrain the model with new patient data

A team is training a deep neural network to recognize objects in security camera footage. The model performs well on the training data but poorly on new footage from different camera angles and lighting conditions. Which concept best explains this issue?

Overfitting to the training data

The model is using reinforcement learning

What is the primary goal of artificial intelligence as a field?

To develop hardware that is faster than the human brain.

To store and retrieve large amounts of data efficiently.

To replace all human jobs with automated systems.

To create machines that can perform tasks that normally require human intelligence.

GIAC Offensive AI Analyst

Domain 1Objective 1

Artificial Intelligence Fundamentals GOAA Practice Questions (Page 2)

Part of the AI Foundations and Social Engineering domain, which makes up ~29% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~15–23 in this domain), expect 5–8 from this objective — we provide 48 practice questions to prepare you well beyond it. (estimate)

48questions here

10free pages

6concepts

Questions 6–10

6expert · hard
A cybersecurity firm is developing an AI to detect zero-day malware. They have a dataset of known malware and benign files, but zero-day malware is unknown. They want the model to flag files that are unusual or different from known benign files. Which approach is most appropriate?
Select an answer first
7expert · hard
A hospital is deploying an AI system to predict patient readmission risk. The model is trained on historical patient data, but the hospital's patient demographics have changed over time. The model's performance degrades because the new patient population differs from the training data. What is the most effective way to address this issue?
Select an answer first
8application · medium
A team is training a deep neural network to recognize objects in security camera footage. The model performs well on the training data but poorly on new footage from different camera angles and lighting conditions. Which concept best explains this issue?
Select an answer first
9foundation · easy
What is the primary goal of artificial intelligence as a field?
Select an answer first
10foundation · easy
Which machine learning paradigm is best described as learning by interacting with an environment and receiving rewards or penalties?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GOAA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GOAA” is a trademark of its owner, used for identification only.

Artificial Intelligence Fundamentals GOAA Practice Questions (Page 2)

Questions 6–10

A cybersecurity firm is developing an AI to detect zero-day malware. They have a dataset of known malware and benign files, but zero-day malware is unknown. They want the model to flag files that are unusual or different from known benign files. Which approach is most appropriate?

A team is training a deep neural network to recognize objects in security camera footage. The model performs well on the training data but poorly on new footage from different camera angles and lighting conditions. Which concept best explains this issue?

What is the primary goal of artificial intelligence as a field?

Which machine learning paradigm is best described as learning by interacting with an environment and receiving rewards or penalties?

Keep studying — AI Foundations and Social Engineering