An analyst is conducting OSINT on a person located in the European Union. They plan to collect data from social media and public records. What legal consideration is most important to keep in mind?

The analyst must comply with GDPR principles, including data minimization and purpose limitation, when processing personal data.

The analyst can freely use any data found online because it is public information.

The analyst must obtain written consent from the individual before collecting any publicly available data.

The analyst must store all collected data on servers located within the EU.

What should an OSINT analyst consider when collecting data from a website hosted in a different country?

The jurisdictional laws of both the analyst's location and the website's host country

The website's design and user interface

What is a key requirement for the secure storage of OSINT data?

Storing data in a public cloud for easy access

Storing data on a personal USB drive without backup

Using encryption and access controls to protect the data

Keeping data in a plain text file for simplicity

An analyst is compiling a profile of a person of interest for a due-diligence report. The analyst has found a personal blog, a LinkedIn profile, a court records database, and a random tweet from an anonymous account. Which source should be given the most weight for factual claims about the person's employment history?

The court records database, because it is an official public record.

The anonymous tweet, because it is recent and publicly available.

The personal blog, because it is written by the person themselves.

The LinkedIn profile, because it is a professional network with user-provided data.

An OSINT analyst is collecting data from social media profiles. Which legal/ethical principle is MOST directly relevant?

Privacy and data protection regulations

GIAC Open Source Intelligence (GOSI)

Domain 1Objective 3

Searching, Collecting, and Processing Data GOSI Practice Questions (Page 2)

Part of the OSINT Fundamentals and Methodology domain, which makes up ~46% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~23–37 in this domain), expect 8–12 from this objective — we provide 41 practice questions to prepare you well beyond it. (estimate)

41questions here

9free pages

7concepts

Questions 6–10

6application · medium
An analyst is conducting OSINT on a person located in the European Union. They plan to collect data from social media and public records. What legal consideration is most important to keep in mind?
Select an answer first
7foundation · easy
What should an OSINT analyst consider when collecting data from a website hosted in a different country?
Select an answer first
8foundation · easy
What is a key requirement for the secure storage of OSINT data?
Select an answer first
9application · medium
An analyst is compiling a profile of a person of interest for a due-diligence report. The analyst has found a personal blog, a LinkedIn profile, a court records database, and a random tweet from an anonymous account. Which source should be given the most weight for factual claims about the person's employment history?
Select an answer first
10foundation · easy
An OSINT analyst is collecting data from social media profiles. Which legal/ethical principle is MOST directly relevant?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GOSI

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GOSI” is a trademark of its owner, used for identification only.