An OSINT team is collaborating on a case and needs to share a sensitive document that contains the names of confidential informants. The team uses a commercial file-sharing service. Which additional measure should the team implement to protect the document's confidentiality?

Rely on the file-sharing service's built-in encryption.

Use a public link with a short expiration time.

Share the document via email with a password-protected PDF.

Encrypt the document with a strong passphrase before uploading it to the file-sharing service.

An OSINT analyst is conducting an investigation and wants to avoid revealing their true identity. Which OPSEC practice directly supports this goal?

Using a dedicated investigation machine with a separate user account

Sharing login credentials with colleagues for efficiency

Posting about the investigation on social media to gather leads

Using the same browser profile for personal and work activities

An analyst is conducting OSINT on a cybercriminal forum that requires registration. The analyst has been approved to create a covert account. To prevent the forum administrators from linking the account to the analyst's real identity, which practice is most critical?

Use a unique username and email address that are not associated with any of the analyst's other online accounts.

Use a password manager to generate a strong, unique password for the forum account.

Access the forum only through a public Wi-Fi network to avoid using a home IP address.

Disable cookies in the browser to prevent the forum from tracking the analyst's activity.

An OSINT team is planning to conduct a large-scale data collection from multiple sources. They have a limited budget and need to prioritize their OPSEC measures. Which threat should they prioritize mitigating first?

The risk of the collected data being inaccurate or incomplete due to the use of anonymization tools.

The risk of a team member accidentally exposing their identity through personal data in a post or comment.

The risk of the data collection being traced back to the team through payment methods used for tools or services.

The risk of the target organization detecting the data collection through network monitoring.

What is a common method to minimize data leakage during an OSINT investigation?

Disabling JavaScript and browser plugins in the investigation browser

Using the analyst's real name when creating accounts for investigation

Sharing investigation notes on a public cloud drive for team access

Using the same username across multiple platforms for consistency

GIAC Open Source Intelligence (GOSI)

Domain 1Objective 2

Privacy and Operational Security Fundamentals GOSI Practice Questions (Page 3)

Part of the OSINT Fundamentals and Methodology domain, which makes up ~46% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~23–37 in this domain), expect 8–12 from this objective — we provide 41 practice questions to prepare you well beyond it. (estimate)

41questions here

9free pages

7concepts

Questions 11–15

11application · medium
An OSINT team is collaborating on a case and needs to share a sensitive document that contains the names of confidential informants. The team uses a commercial file-sharing service. Which additional measure should the team implement to protect the document's confidentiality?
Select an answer first
12foundation · easy
An OSINT analyst is conducting an investigation and wants to avoid revealing their true identity. Which OPSEC practice directly supports this goal?
Select an answer first
13application · medium
An analyst is conducting OSINT on a cybercriminal forum that requires registration. The analyst has been approved to create a covert account. To prevent the forum administrators from linking the account to the analyst's real identity, which practice is most critical?
Select an answer first
14expert · hard
An OSINT team is planning to conduct a large-scale data collection from multiple sources. They have a limited budget and need to prioritize their OPSEC measures. Which threat should they prioritize mitigating first?
Select an answer first
15foundation · easy
What is a common method to minimize data leakage during an OSINT investigation?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GOSI

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GOSI” is a trademark of its owner, used for identification only.