Why is OSINT considered a foundational component in AI-driven offensive operations?

It is the only source of intelligence that can be used to breach a network

It provides a legal and low-risk method to gather initial intelligence about a target before more invasive actions

It guarantees that all collected information is accurate and up-to-date

It eliminates the need for any other intelligence-gathering methods

How can AI-driven behavioral analysis of OSINT data help in offensive operations?

By identifying patterns in a target's online activity that may reveal habits or vulnerabilities

By predicting the target's exact password

By encrypting the target's social media accounts

By automatically sending malware to the target's device

Which AI capability is most directly used to automate the collection of OSINT data from multiple public sources?

Reinforcement learning to train agents to play games

Generative adversarial networks (GANs) to create realistic images

Natural language processing (NLP) to extract relevant information from text

Computer vision to recognize objects in images

An analyst is reviewing OSINT data from multiple forums and social media platforms to uncover hidden connections between a target company's employees and a known threat actor. The analyst notices that several employees follow the same obscure accounts and use similar unusual phrases. Which AI technique is most appropriate to reveal these hidden relationships?

Simple keyword matching to find posts containing the company name.

Automated translation of foreign-language posts.

Sentiment analysis to gauge the tone of posts about the company.

Graph analysis and anomaly detection to identify unusual common connections and behavioral outliers.

What is the primary goal of using AI for sentiment analysis in OSINT?

To identify the geographical location of the author of a post

To extract the names of all people mentioned in a document

To predict the exact future actions of a target

To determine the emotional tone or attitude expressed in text about a target

GIAC Offensive AI Analyst

Domain 2Objective 1

Using AI for OSINT GOAA Practice Questions (Page 2)

Part of the AI-Driven Offensive Operations domain, which makes up ~40% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~20–32 in this domain), expect 5–8 from this objective — we provide 46 practice questions to prepare you well beyond it. (estimate)

46questions here

10free pages

7concepts

Questions 6–10

6foundation · easy
Why is OSINT considered a foundational component in AI-driven offensive operations?
Select an answer first
7foundation · easy
How can AI-driven behavioral analysis of OSINT data help in offensive operations?
Select an answer first
8foundation · easy
Which AI capability is most directly used to automate the collection of OSINT data from multiple public sources?
Select an answer first
9application · medium
An analyst is reviewing OSINT data from multiple forums and social media platforms to uncover hidden connections between a target company's employees and a known threat actor. The analyst notices that several employees follow the same obscure accounts and use similar unusual phrases. Which AI technique is most appropriate to reveal these hidden relationships?
Select an answer first
10foundation · easy
What is the primary goal of using AI for sentiment analysis in OSINT?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GOAA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GOAA” is a trademark of its owner, used for identification only.