During an investigation, you find a domain that appears to be used for phishing. The WHOIS record shows the registrant organization as 'PrivacyGuard Services' and the registrar as a well-known commercial registrar. You need to identify the actual individual or organization behind the registration. What is the most appropriate next step?

Query the domain's NS records to identify the hosting provider and contact them directly.

Use a reverse WHOIS lookup service to search for other domains with the same privacy service name.

Check the WHOIS record for the registrar's abuse contact and submit a request for the underlying registrant information.

Perform a reverse IP lookup to find other domains hosted on the same server and assume they share the same registrant.

An analyst is enumerating subdomains of a target domain and decides to use a wordlist to generate potential subdomain names and then query DNS for each one. Which subdomain enumeration technique is this?

Certificate transparency log search

You have collected data on multiple domains, IPs, and hosting providers. You need to identify which domains are hosted on the same IP address to find related infrastructure. Which approach is most effective?

Perform a traceroute to each domain to see if they share the same network path.

Query the WHOIS record for each domain to find the same registrant.

Perform reverse IP lookups for each IP address to find all domains hosted on it.

Use a search engine to find domains with similar content.

GIAC Open Source Intelligence (GOSI)

Domain 2Objective 3

Network Data and Infrastructure Analysis GOSI Practice Questions (Page 1)

Part of the Target Investigation and Infrastructure Analysis domain, which makes up ~54% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~27–43 in this domain), expect 9–14 from this objective — we provide 47 practice questions to prepare you well beyond it. (estimate)

47questions here

10free pages

8concepts

Questions 1–5

1foundation · easy
During the initial phase of an infrastructure analysis, an analyst needs to gather passive network-related data about a target domain without directly interacting with the target's systems. Which data source would provide authoritative DNS records for the domain?
Select an answer first
2foundation · easy
When mapping the relationships between a domain and its underlying infrastructure, which of the following is a direct relationship that can be established using DNS A records?
Select an answer first
3application · medium
During an investigation, you find a domain that appears to be used for phishing. The WHOIS record shows the registrant organization as 'PrivacyGuard Services' and the registrar as a well-known commercial registrar. You need to identify the actual individual or organization behind the registration. What is the most appropriate next step?
Select an answer first
4foundation · easy
An analyst is enumerating subdomains of a target domain and decides to use a wordlist to generate potential subdomain names and then query DNS for each one. Which subdomain enumeration technique is this?
Select an answer first
5application · medium
You have collected data on multiple domains, IPs, and hosting providers. You need to identify which domains are hosted on the same IP address to find related infrastructure. Which approach is most effective?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GOSI

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GOSI” is a trademark of its owner, used for identification only.

Network Data and Infrastructure Analysis GOSI Practice Questions (Page 1)

Questions 1–5

During the initial phase of an infrastructure analysis, an analyst needs to gather passive network-related data about a target domain without directly interacting with the target's systems. Which data source would provide authoritative DNS records for the domain?

When mapping the relationships between a domain and its underlying infrastructure, which of the following is a direct relationship that can be established using DNS A records?

An analyst is enumerating subdomains of a target domain and decides to use a wordlist to generate potential subdomain names and then query DNS for each one. Which subdomain enumeration technique is this?

You have collected data on multiple domains, IPs, and hosting providers. You need to identify which domains are hosted on the same IP address to find related infrastructure. Which approach is most effective?

Keep studying — Target Investigation and Infrastructure Analysis