Using AI for OSINT GOAA Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A red team is conducting OSINT on a European company as part of an authorized engagement. The team plans to use AI to scrape public social media profiles and forums to build target profiles. Which action is most consistent with ethical and legal boundaries?

   • AScrape all available data, including private posts that are accidentally accessible, to maximize intelligence.
   • BLimit collection to publicly accessible data and ensure the engagement scope and data protection regulations are reviewed by legal counsel.
   • CUse AI to infer sensitive personal attributes and include them in the final report without consent.
   • DAnonymize all data before analysis to avoid any legal issues.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which AI approach is commonly used to detect patterns in OSINT data that might reveal hidden relationships?

   • AGenerative adversarial networks (GANs) to create synthetic data
   • BReinforcement learning to optimize game strategies
   • CAutoencoders for data compression
   • DGraph neural networks (GNNs) to analyze relationships between entities
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A red team is conducting OSINT on a multinational company with offices in the EU and the US. The team plans to use AI to scrape public social media and forums to build profiles of executives. Legal counsel has warned about GDPR compliance. The team wants to maximize intelligence while staying compliant. Which approach is best?

   • AAnonymize all data before analysis to avoid GDPR obligations.
   • BCollect all available data, including inferred sensitive attributes, because the engagement is authorized.
   • CStore all collected data on servers located in the EU to ensure compliance.
   • DCollect only publicly accessible data, minimize personal data to what is necessary, and document the legal basis for processing.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A red team needs to deliver a weekly OSINT briefing to its leadership. The briefing must include a summary of new findings, a chart of the target's social media activity, and a list of newly identified employees. The team wants to automate this process as much as possible. Which approach is most effective?

   • AHire an intern to compile the briefing from various sources.
   • BConfigure an AI-powered OSINT platform to schedule automated data collection, entity extraction, and report generation.
   • CUse a simple script that downloads tweets and saves them to a CSV file.
   • DManually collect data each week and create a PowerPoint presentation.
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   An OSINT analyst is investigating a disinformation campaign targeting a company. The analyst has collected thousands of posts from social media and forums. The goal is to identify the likely orchestrators and their connections to the company. Which approach is most effective?

   • AUse graph analysis to map relationships between accounts and entities, then apply anomaly detection to find coordinated behavior.
   • BUse topic modeling to categorize the themes of the posts.
   • CUse sentiment analysis to measure the negativity of posts about the company.
   • DUse image recognition to identify logos in posts.
   Reveal Solution Discussion Select an answer first