What is a primary advantage of using an AI model to mutate existing malware code?

It ensures the malware will run on all operating systems without modification.

It reduces the need for command-and-control infrastructure.

It can produce many functionally equivalent variants that may evade signature-based detection.

It guarantees that the malware will be undetectable by all security tools.

A journalist receives a leaked video that appears to show a politician accepting a bribe. The journalist must verify the video's authenticity before publishing. The video has inconsistent eye blinking and slight facial warping. Which combination of actions is most appropriate?

Ignore the video because deepfake detection is unreliable and the video cannot be verified.

Use a deepfake detection tool that analyzes physiological signals, and also seek corroborating evidence from other sources.

Rely solely on a commercial deepfake detection service that claims high accuracy.

Publish the video immediately with a disclaimer that it may be a deepfake, to inform the public quickly.

A social media platform wants to automatically flag potential deepfake videos uploaded by users. The platform has a large dataset of real videos and a smaller set of known deepfakes. Which detection approach is most appropriate given the data imbalance?

Use a pre-trained GAN discriminator to classify any video that it cannot distinguish from real as a deepfake.

Rely on manual review by human moderators for all flagged videos.

Train a supervised classifier on the available real and deepfake videos, using data augmentation to balance the classes.

Apply a simple hash-based comparison to known deepfake videos to identify exact matches.

Which AI architecture is commonly used to create realistic deepfakes by pitting a generator against a discriminator?

Convolutional Neural Network (CNN)

Generative Adversarial Network (GAN)

GIAC Offensive AI Analyst

Domain 3Objective 2

Creating Malicious Software with AI GOAA Practice Questions (Page 3)

Part of the AI-Enhanced Malware and Deepfakes domain, which makes up ~32% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~16–26 in this domain), expect 5–9 from this objective — we provide 32 practice questions to prepare you well beyond it. (estimate)

32questions here

7free pages

5concepts

Questions 11–15

11foundation · easy
What is a primary advantage of using an AI model to mutate existing malware code?
Select an answer first
12expert · hard
A journalist receives a leaked video that appears to show a politician accepting a bribe. The journalist must verify the video's authenticity before publishing. The video has inconsistent eye blinking and slight facial warping. Which combination of actions is most appropriate?
Select an answer first
13foundation · easy
Which ethical principle is most directly violated when an attacker uses AI to create a deepfake of a public figure making false statements?
Select an answer first
14application · medium
A social media platform wants to automatically flag potential deepfake videos uploaded by users. The platform has a large dataset of real videos and a smaller set of known deepfakes. Which detection approach is most appropriate given the data imbalance?
Select an answer first
15foundation · easy
Which AI architecture is commonly used to create realistic deepfakes by pitting a generator against a discriminator?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GOAA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GOAA” is a trademark of its owner, used for identification only.