Using AI for OSINT GOAA Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   A security consultant is explaining to a client why OSINT is valuable for offensive security testing. The client is concerned about privacy and legal issues. Which statement best addresses the client's concerns while explaining the value of OSINT?

   • AOSINT uses publicly available information, and when conducted within authorized scope and legal boundaries, it provides valuable reconnaissance for testing defenses.
   • BOSINT requires no authorization because it is public information.
   • COSINT is completely risk-free because it only uses public data.
   • DOSINT is only useful for social engineering, not for technical testing.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   What is the main benefit of using AI to generate automated OSINT reports?

   • AIt saves time and ensures consistency in presenting findings to stakeholders
   • BIt guarantees that all findings are 100% accurate
   • CIt eliminates the need for human review of the intelligence
   • DIt automatically executes offensive actions based on the report
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A security team is monitoring a hacktivist group's public Telegram channel. They want to predict when the group is likely to launch a DDoS attack based on the emotional tone of recent messages and the timing of posts. Which combination of AI techniques would be most effective?

   • AAnomaly detection on message length to find unusually long posts.
   • BAutomated report generation to create a weekly summary of the channel.
   • CSentiment analysis on messages combined with time-series forecasting of posting activity.
   • DNamed-entity recognition to identify the group's members and their locations.
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   An analyst is investigating a potential data breach that was publicly discussed on a forum. The analyst has collected forum posts, social media mentions, and news articles. The goal is to determine if the breach is real and identify the affected systems. Which AI technique is most useful?

   • ASentiment analysis to gauge the emotional tone of the posts.
   • BEntity extraction to identify system names, followed by anomaly detection to find unusual patterns in the discussions.
   • CImage classification to identify screenshots of the breach.
   • DTopic modeling to categorize the subjects of the posts.
   Reveal Solution Discussion Select an answer first
6. 25application · easy

   A junior analyst on an offensive security team is told to 'use OSINT' to gather intelligence on a target. The analyst asks what sources are appropriate. Which response correctly defines OSINT and its role in offensive operations?

   • AOSINT is intelligence collected from publicly available sources, and it is used to inform attack planning and social engineering.
   • BOSINT is intelligence derived from proprietary commercial databases that require a subscription.
   • COSINT is intelligence obtained from covert human sources and is used for real-time attack execution.
   • DOSINT is intelligence gathered from private communications intercepted during an engagement.
   Reveal Solution Discussion Select an answer first