
GIAC Offensive AI Analyst
Domain 2Objective 1
Using AI for OSINT GOAA Practice Questions (Page 4)
Part of the AI-Driven Offensive Operations domain, which makes up ~40% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~20–32 in this domain), expect 5–8 from this objective — we provide 46 practice questions to prepare you well beyond it. (estimate)
46questions here
10free pages
7concepts
Questions 16–20
- 16
Which AI technique is specifically used to identify and extract named entities such as people, organizations, and locations from OSINT text?
Select an answer first - 17
A security analyst is building a profile of a target individual from public sources. The analyst has collected forum posts, blog comments, and social media activity. The goal is to identify the individual's employer, professional role, and geographic location. Which AI technique should be applied first to extract these structured details?
Select an answer first - 18
An intelligence analyst is examining a dataset of public forum posts to identify potential insider threats. The dataset includes user activity timestamps, posting locations, and text content. The analyst wants to detect users who exhibit unusual behavior that might indicate malicious intent, such as posting at odd hours or discussing sensitive topics. Which AI approach would be most effective?
Select an answer first - 19
A social engineering team is preparing a vishing attack against a target executive. They have access to the executive's public speaking videos and social media posts. The team wants to identify the executive's communication style, typical emotional state, and preferred topics to build rapport. Which AI technique would be most useful?
Select an answer first - 20
A red team is conducting OSINT on a target in a jurisdiction with strict data protection laws. The team has collected a large amount of personal data from public sources and plans to use AI to analyze it. The team's legal counsel has advised that the processing may be unlawful. Which action should the team take?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GOAA” is a trademark of its owner, used for identification only.