A security operations center is monitoring public sentiment about a critical infrastructure provider. They want to detect early signs of social engineering campaigns targeting the provider's employees. The SOC has access to social media feeds and public forums. Which AI technique would be most useful for early detection?

Sentiment analysis to detect a sudden shift toward negative or hostile language directed at the provider.

Anomaly detection on the number of posts per day.

Automated report generation to summarize daily mentions.

Named-entity recognition to identify all employees mentioned in posts.

What is a common approach for using AI to automate OSINT data collection from social media platforms?

Manually copying and pasting posts into a spreadsheet

Using web scraping tools combined with AI models to filter and categorize posts

Sending phishing emails to users to obtain their credentials

Using a VPN to access the dark web and extract hidden data

An analyst is examining OSINT data to find potential security weaknesses in a target organization. The analyst notices that several employees post about work-related topics on personal social media accounts, and some posts reveal internal project names. Which AI technique would best identify these potential weaknesses?

Sentiment analysis to determine employee satisfaction.

Image classification to identify logos in photos.

Automated translation of posts in foreign languages.

Pattern recognition to identify recurring mentions of internal project names and correlate them with employee roles.

In the context of OSINT analysis, what is the purpose of anomaly detection?

To classify data into predefined categories

To translate data from one language to another

To identify unusual patterns or outliers in data that may indicate hidden relationships or security weaknesses

To summarize the main topics of a large dataset

An OSINT analyst has collected a large volume of data about a target organization and needs to present findings to a non-technical stakeholder. The presentation should clearly show the relationships between key employees, their locations, and recent mentions. Which approach is most effective?

Provide a raw data dump in a compressed archive for the stakeholder to explore.

Create a simple spreadsheet with columns for name, location, and date.

Send a long text report listing every mention in chronological order.

Generate an interactive dashboard with a relationship graph and timeline of mentions.

GIAC Offensive AI Analyst

Domain 2Objective 1

Using AI for OSINT GOAA Practice Questions (Page 3)

Part of the AI-Driven Offensive Operations domain, which makes up ~40% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~20–32 in this domain), expect 5–8 from this objective — we provide 46 practice questions to prepare you well beyond it. (estimate)

46questions here

10free pages

7concepts

Questions 11–15

11application · medium
A security operations center is monitoring public sentiment about a critical infrastructure provider. They want to detect early signs of social engineering campaigns targeting the provider's employees. The SOC has access to social media feeds and public forums. Which AI technique would be most useful for early detection?
Select an answer first
12foundation · easy
What is a common approach for using AI to automate OSINT data collection from social media platforms?
Select an answer first
13application · medium
An analyst is examining OSINT data to find potential security weaknesses in a target organization. The analyst notices that several employees post about work-related topics on personal social media accounts, and some posts reveal internal project names. Which AI technique would best identify these potential weaknesses?
Select an answer first
14foundation · easy
In the context of OSINT analysis, what is the purpose of anomaly detection?
Select an answer first
15application · medium
An OSINT analyst has collected a large volume of data about a target organization and needs to present findings to a non-technical stakeholder. The presentation should clearly show the relationships between key employees, their locations, and recent mentions. Which approach is most effective?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GOAA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GOAA” is a trademark of its owner, used for identification only.

Using AI for OSINT GOAA Practice Questions (Page 3)

Questions 11–15

What is a common approach for using AI to automate OSINT data collection from social media platforms?

In the context of OSINT analysis, what is the purpose of anomaly detection?

An OSINT analyst has collected a large volume of data about a target organization and needs to present findings to a non-technical stakeholder. The presentation should clearly show the relationships between key employees, their locations, and recent mentions. Which approach is most effective?

Keep studying — AI-Driven Offensive Operations