An OSINT analyst is verifying a video that appears to show a protest at a specific intersection. The video's metadata indicates it was recorded on a smartphone, but the analyst notices the audio track has a different ambient noise profile than expected for that location. What should the analyst do to verify the video's authenticity?

Extract the video's GPS metadata and verify the location using a mapping service.

Use an AI tool to analyze the video for deepfake artifacts.

Compare the video's audio with known recordings from the same intersection and check the video's frame rate.

Run a reverse image search on key frames to see if the video was previously published.

An analyst is verifying an audio recording that allegedly captures a conversation between two known individuals. The recording has metadata showing it was recorded on a specific device. What is the most appropriate next step?

Analyze the audio's spectral content to determine the exact location.

Check the device's serial number in the metadata against public databases.

Use reverse image search on the audio file.

Compare the voices in the recording with known samples of the individuals.

Which audio verification technique involves visualizing the frequency content of a recording over time to identify anomalies or signs of splicing?

Cross-referencing with known sources

An analyst receives an audio recording that allegedly contains a threat. The recording is short and has no metadata. The analyst wants to determine if the voice is a specific person. What is the most reliable approach?

Listen to the recording and compare it to memory of the person's voice.

Use voice biometric analysis to compare the recording with known samples of the person.

Run the audio through an AI transcription service to identify the speaker.

Check the audio's spectral content to see if it matches known recordings.

An analyst is verifying a photo that allegedly shows a company's data center. The photo's metadata shows it was taken with a drone, but the analyst notices the shadows in the image are inconsistent with the timestamp. What should the analyst do next?

Run a reverse image search to see if the photo was previously published.

Use an AI tool to detect if the image is a deepfake.

Use a shadow analysis tool to compare the shadow angles with the sun's position at the timestamp.

Check the drone's flight logs to see if it was in the area at that time.

GIAC Strategic OSINT Analyst

Domain 2Objective 2

Multimedia and AI in OSINT GSOA Practice Questions (Page 2)

Part of the Advanced OSINT Tools and Techniques domain, which makes up ~56% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~39–67 in this domain), expect 13–22 from this objective — we provide 25 practice questions to prepare you well beyond it. (estimate)

25questions here

5free pages

4concepts

Questions 6–10

6application · medium
An OSINT analyst is verifying a video that appears to show a protest at a specific intersection. The video's metadata indicates it was recorded on a smartphone, but the analyst notices the audio track has a different ambient noise profile than expected for that location. What should the analyst do to verify the video's authenticity?
Select an answer first
7application · medium
An analyst is verifying an audio recording that allegedly captures a conversation between two known individuals. The recording has metadata showing it was recorded on a specific device. What is the most appropriate next step?
Select an answer first
8foundation · easy
Which audio verification technique involves visualizing the frequency content of a recording over time to identify anomalies or signs of splicing?
Select an answer first
9expert · hard
An analyst receives an audio recording that allegedly contains a threat. The recording is short and has no metadata. The analyst wants to determine if the voice is a specific person. What is the most reliable approach?
Select an answer first
10application · medium
An analyst is verifying a photo that allegedly shows a company's data center. The photo's metadata shows it was taken with a drone, but the analyst notices the shadows in the image are inconsistent with the timestamp. What should the analyst do next?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSOA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSOA” is a trademark of its owner, used for identification only.