
GIAC Offensive AI Analyst
Domain 3Objective 2
Creating Malicious Software with AI GOAA Practice Questions (Page 4)
Part of the AI-Enhanced Malware and Deepfakes domain, which makes up ~32% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~16–26 in this domain), expect 5–9 from this objective — we provide 32 practice questions to prepare you well beyond it. (estimate)
32questions here
7free pages
5concepts
Questions 16–20
- 16
Which of the following is a common technique used to detect deepfake videos?
Select an answer first - 17
Which technique is commonly used in deepfake creation to swap one person's face onto another's body in a video?
Select an answer first - 18
A penetration tester is hired to assess a client's defenses against AI-generated phishing emails. The tester plans to use a language model to craft convincing phishing messages. Which action is most ethically and legally appropriate?
Select an answer first - 19
What is a known limitation of deepfake detection methods?
Select an answer first - 20
A video forensics analyst is reviewing a video that is suspected to be a deepfake. The analyst notices that the subject's head movements are smooth but the facial expressions do not match the spoken words. Which detection technique would be most effective in confirming the manipulation?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GOAA” is a trademark of its owner, used for identification only.