What is a key legal consideration when collecting OSINT from social media platforms?

Obtaining written consent from every user whose data is collected.

Using only paid tools to avoid legal issues.

Respecting the platform's terms of service and applicable privacy laws.

Ensuring that all collected data is stored in the cloud.

An OSINT analyst has completed the analysis of a phishing campaign targeting their organization. They need to present the findings to a non-technical executive team. What is the best way to structure the report?

Provide a detailed timeline of the campaign's activities.

Include all raw data in an appendix for transparency.

Start with technical indicators and then explain the implications.

Lead with a summary of key findings and recommended actions.

An OSINT analyst has completed the analysis phase and must now produce a report for executives who need to make a decision. What is the most important element to include in the report?

A list of all sources with their URLs.

A detailed explanation of the collection methods used.

A clear conclusion with actionable recommendations.

A comprehensive list of all raw data collected.

An analyst is writing a report on a potential security threat. The analyst has two sources: a reputable cybersecurity news site and an anonymous forum post. Both report the same vulnerability. How should the analyst treat this information?

Give higher confidence to the news site and mention the forum post as corroboration.

Ignore the forum post because it is anonymous.

Treat both sources as equally reliable because they report the same thing.

Include only the forum post because it is more detailed.

GIAC Open Source Intelligence (GOSI)

Domain 1Objective 1

OSINT Methodology GOSI Practice Questions (Page 8)

Part of the OSINT Fundamentals and Methodology domain, which makes up ~46% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~23–37 in this domain), expect 8–12 from this objective — we provide 50 practice questions to prepare you well beyond it. (estimate)

50questions here

10free pages

6concepts

Questions 36–40

36foundation · easy
What is a key legal consideration when collecting OSINT from social media platforms?
Select an answer first
37foundation · easy
In the intelligence cycle, which phase involves converting raw data into a form that can be used by analysts?
Select an answer first
38application · medium
An OSINT analyst has completed the analysis of a phishing campaign targeting their organization. They need to present the findings to a non-technical executive team. What is the best way to structure the report?
Select an answer first
39application · medium
An OSINT analyst has completed the analysis phase and must now produce a report for executives who need to make a decision. What is the most important element to include in the report?
Select an answer first
40application · medium
An analyst is writing a report on a potential security threat. The analyst has two sources: a reputable cybersecurity news site and an anonymous forum post. Both report the same vulnerability. How should the analyst treat this information?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GOSI

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GOSI” is a trademark of its owner, used for identification only.