An OSINT analyst is compiling a report on a corporate investigation. The report includes screenshots of social media posts that contain personal information of the target's family members. What is the most appropriate way to handle this information?

Redact the personal information of family members before including the screenshots in the report.

Include the screenshots as-is to provide complete evidence for the investigation.

Share the screenshots with the client without redaction, as they are part of the investigation.

Exclude the screenshots entirely and describe the posts in text form.

Why is it important to use secure communication channels when collaborating on an OSINT investigation?

To comply with data retention laws

To prevent unauthorized parties from intercepting sensitive investigation details

To speed up the transfer of large files

To ensure that all team members have access to the same information

An OSINT analyst is creating a profile of a target for a client. The analyst finds a public post where the target discusses a sensitive medical condition. What is the most appropriate way to handle this information?

Include the information but note that it is sensitive and should be handled with care.

Exclude the information from the report, as it is sensitive and may not be relevant to the investigation.

Ask the client if they want the information included in the report.

Include the information in the report, as it is publicly available and relevant to the investigation.

An OSINT team is collaborating on a sensitive investigation and needs to share findings and source materials securely. The team is distributed across multiple countries, and some members are in jurisdictions with restrictive surveillance laws. Which communication method best protects the confidentiality of the shared information?

Send files via email with password-protected ZIP attachments.

Use a public internet forum with encrypted private messages.

Use a commercial end-to-end encrypted messaging app with ephemeral messages.

Use a shared cloud drive with link sharing and a strong password.

An OSINT analyst is considering using a technique that might violate the terms of service of a website. What should the analyst do first?

Ask a colleague to perform the technique instead

Consult with legal counsel or follow organizational policy

Proceed because the information is publicly available

GIAC Open Source Intelligence (GOSI)

Domain 1Objective 2

Privacy and Operational Security Fundamentals GOSI Practice Questions (Page 4)

Part of the OSINT Fundamentals and Methodology domain, which makes up ~46% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~23–37 in this domain), expect 8–12 from this objective — we provide 41 practice questions to prepare you well beyond it. (estimate)

41questions here

9free pages

7concepts

Questions 16–20

16application · medium
An OSINT analyst is compiling a report on a corporate investigation. The report includes screenshots of social media posts that contain personal information of the target's family members. What is the most appropriate way to handle this information?
Select an answer first
17foundation · easy
Why is it important to use secure communication channels when collaborating on an OSINT investigation?
Select an answer first
18application · medium
An OSINT analyst is creating a profile of a target for a client. The analyst finds a public post where the target discusses a sensitive medical condition. What is the most appropriate way to handle this information?
Select an answer first
19application · medium
An OSINT team is collaborating on a sensitive investigation and needs to share findings and source materials securely. The team is distributed across multiple countries, and some members are in jurisdictions with restrictive surveillance laws. Which communication method best protects the confidentiality of the shared information?
Select an answer first
20foundation · easy
An OSINT analyst is considering using a technique that might violate the terms of service of a website. What should the analyst do first?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GOSI

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GOSI” is a trademark of its owner, used for identification only.