Which legal framework is most likely to affect the use of AI for OSINT on personal data of individuals in the European Union?

Children's Online Privacy Protection Act (COPPA)

Health Insurance Portability and Accountability Act (HIPAA)

General Data Protection Regulation (GDPR)

An OSINT analyst is investigating a network of fake social media accounts that appear to be coordinated. The analyst has collected account metadata, posting times, and content. The goal is to identify the most likely bot accounts while avoiding false positives on legitimate users who post frequently. Which approach balances accuracy and efficiency?

Use unsupervised clustering on behavioral features (posting frequency, timing entropy, content similarity) and then manually review only the cluster centroids.

Perform sentiment analysis on all posts and flag accounts with negative sentiment.

Use a supervised classifier trained on a small labeled dataset of known bots.

Flag any account that posts more than 10 times per day as a bot.

What is a key ethical consideration when using AI for OSINT in offensive operations?

Sharing all collected intelligence publicly to promote transparency

Using AI to hide the identity of the analyst from the target

Maximizing the amount of data collected regardless of its source

Ensuring that the collection and analysis comply with applicable laws and regulations

A red team is planning a phishing campaign against a specific department. The team has collected public posts from employees in that department and wants to identify which employees are most likely to click on a malicious link. Which combination of AI techniques would best inform this decision?

Named-entity recognition to identify employees' job titles.

Topic modeling to identify employees interested in technology.

Sentiment analysis to identify dissatisfied employees, combined with behavioral analysis of posting times to find those active during work hours.

Image classification to identify employees who post photos of their workspace.

After collecting OSINT data on a target, an analyst needs to produce a report that highlights the relationships between key individuals and their associated organizations. The report will be used by the offensive team to plan a vishing attack. Which visualization is most appropriate?

A timeline of all collected posts.

A relationship graph showing nodes for individuals and organizations with edges for connections.

A pie chart showing the proportion of mentions per source.

A bar chart comparing the number of posts per individual.

GIAC Offensive AI Analyst

Domain 2Objective 1

Using AI for OSINT GOAA Practice Questions (Page 9)

Part of the AI-Driven Offensive Operations domain, which makes up ~40% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~20–32 in this domain), expect 5–8 from this objective — we provide 46 practice questions to prepare you well beyond it. (estimate)

46questions here

10free pages

7concepts

Questions 41–45

41foundation · easy
Which legal framework is most likely to affect the use of AI for OSINT on personal data of individuals in the European Union?
Select an answer first
42expert · hard
An OSINT analyst is investigating a network of fake social media accounts that appear to be coordinated. The analyst has collected account metadata, posting times, and content. The goal is to identify the most likely bot accounts while avoiding false positives on legitimate users who post frequently. Which approach balances accuracy and efficiency?
Select an answer first
43foundation · easy
What is a key ethical consideration when using AI for OSINT in offensive operations?
Select an answer first
44expert · hard
A red team is planning a phishing campaign against a specific department. The team has collected public posts from employees in that department and wants to identify which employees are most likely to click on a malicious link. Which combination of AI techniques would best inform this decision?
Select an answer first
45application · medium
After collecting OSINT data on a target, an analyst needs to produce a report that highlights the relationships between key individuals and their associated organizations. The report will be used by the offensive team to plan a vishing attack. Which visualization is most appropriate?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GOAA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GOAA” is a trademark of its owner, used for identification only.