A team is conducting a joint OSINT investigation with a partner organization in another country. They need to share collected data while respecting different privacy laws. Which storage and sharing approach is most appropriate?

Store all data in the partner's system because they have stricter laws.

Store data in a shared cloud drive accessible to both teams.

Store data in each team's local system and share only summaries or anonymized data.

Use a public file-sharing service to transfer all raw data.

An analyst is tasked with identifying public sentiment about a new product launch. What is the FIRST step in formulating an effective search strategy?

Define the intelligence requirement and the specific questions to answer

Run a broad search using multiple keywords to see what results appear

Identify the target's personal social media accounts

Select the most popular social media platform for the search

An analyst is investigating a case that involves data subjects in multiple countries, including the EU and the US. The analyst plans to store the collected data on a server located in the US. Which legal consideration is most important?

Store the data in the US because US law is less restrictive.

Obtain consent from every data subject before collecting their data.

Ensure that data transfers from the EU to the US comply with an appropriate legal mechanism, such as the EU-US Data Privacy Framework.

Anonymize all data before storing it in the US.

An OSINT team is collecting data from multiple sources for a time-sensitive investigation. They need to process and normalize the data quickly to identify leads. The team has limited storage and computational resources. What is the most efficient approach?

Manually review and normalize each piece of data as it is collected.

Process and normalize data in real-time as it is collected, using automated scripts to extract key fields and discard irrelevant data.

Collect all raw data and store it without processing, then analyze it later.

Collect data in its original format and use a powerful search tool to find relevant information on demand.

GIAC Open Source Intelligence (GOSI)

Domain 1Objective 3

Searching, Collecting, and Processing Data GOSI Practice Questions (Page 1)

Part of the OSINT Fundamentals and Methodology domain, which makes up ~46% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~23–37 in this domain), expect 8–12 from this objective — we provide 41 practice questions to prepare you well beyond it. (estimate)

41questions here

9free pages

7concepts

Questions 1–5

1expert · hard
A team is conducting a joint OSINT investigation with a partner organization in another country. They need to share collected data while respecting different privacy laws. Which storage and sharing approach is most appropriate?
Select an answer first
2foundation · easy
An analyst is tasked with identifying public sentiment about a new product launch. What is the FIRST step in formulating an effective search strategy?
Select an answer first
3expert · hard
An analyst is investigating a case that involves data subjects in multiple countries, including the EU and the US. The analyst plans to store the collected data on a server located in the US. Which legal consideration is most important?
Select an answer first
4expert · hard
An OSINT team is collecting data from multiple sources for a time-sensitive investigation. They need to process and normalize the data quickly to identify leads. The team has limited storage and computational resources. What is the most efficient approach?
Select an answer first
5foundation · easy
Which search query would return results that include the exact phrase 'data breach' and also contain the word 'healthcare'?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GOSI

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GOSI” is a trademark of its owner, used for identification only.