A video shows a building that the analyst believes is in a specific city. The video has no metadata. What is the most appropriate way to confirm the location?

Look at the video's color grading to determine the time of day.

Analyze the video's audio for traffic sounds.

Check the video's file size to estimate the recording device.

Use reverse image search on key frames to find matching images of the building.

An analyst is verifying an image that shows a person at a specific event. The image metadata shows the date and time, but the analyst has an audio recording that claims to be from the same event. What is the most appropriate way to corroborate the image and audio?

Analyze the image's color histogram to match the audio's frequency spectrum.

Compare the date and time in the image metadata with the audio recording's metadata.

Check the image's file size against the audio's bitrate.

Use reverse image search on the audio recording.

An analyst is verifying a video of a political rally. The video shows a large crowd, but the analyst notices that the audio track has a different echo pattern than expected for an outdoor event. What should the analyst do to determine if the video is authentic?

Analyze the audio for reverb characteristics and compare with known outdoor recordings.

Use reverse image search on frames to see if the video was previously posted.

Extract the video's GPS metadata and verify the rally location.

Check the video's resolution and frame rate to see if it matches standard smartphone recordings.

An analyst is verifying a video that allegedly shows a meeting between two executives. The video's audio track has a different ambient noise profile than the video's visual environment. The analyst also notices that the video's metadata indicates it was recorded on a device that does not support the video's resolution. The analyst must decide the most reliable approach to verify the video. What should the analyst do?

Use an AI tool to detect if the video is a deepfake.

Analyze the video's metadata to see if it was edited.

Perform spectral analysis on the audio and compare the video's resolution with known device specifications.

Use reverse image search on key frames to find the original video.

GIAC Strategic OSINT Analyst

Domain 2Objective 2

Multimedia and AI in OSINT GSOA Practice Questions (Page 5)

Part of the Advanced OSINT Tools and Techniques domain, which makes up ~56% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~39–67 in this domain), expect 13–22 from this objective — we provide 25 practice questions to prepare you well beyond it. (estimate)

25questions here

5free pages

4concepts

Questions 21–25

21application · medium
A video shows a building that the analyst believes is in a specific city. The video has no metadata. What is the most appropriate way to confirm the location?
Select an answer first
22application · medium
An analyst is verifying an image that shows a person at a specific event. The image metadata shows the date and time, but the analyst has an audio recording that claims to be from the same event. What is the most appropriate way to corroborate the image and audio?
Select an answer first
23application · medium
An analyst is verifying a video of a political rally. The video shows a large crowd, but the analyst notices that the audio track has a different echo pattern than expected for an outdoor event. What should the analyst do to determine if the video is authentic?
Select an answer first
24foundation · easy
An OSINT analyst receives a digital image and needs to verify its provenance. Which technique directly examines the embedded metadata of the image file to look for camera model, timestamp, and GPS coordinates?
Select an answer first
25expert · hard
An analyst is verifying a video that allegedly shows a meeting between two executives. The video's audio track has a different ambient noise profile than the video's visual environment. The analyst also notices that the video's metadata indicates it was recorded on a device that does not support the video's resolution. The analyst must decide the most reliable approach to verify the video. What should the analyst do?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to GSOA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSOA” is a trademark of its owner, used for identification only.

Multimedia and AI in OSINT GSOA Practice Questions (Page 5)

Questions 21–25

A video shows a building that the analyst believes is in a specific city. The video has no metadata. What is the most appropriate way to confirm the location?

An analyst is verifying an image that shows a person at a specific event. The image metadata shows the date and time, but the analyst has an audio recording that claims to be from the same event. What is the most appropriate way to corroborate the image and audio?

An analyst is verifying a video of a political rally. The video shows a large crowd, but the analyst notices that the audio track has a different echo pattern than expected for an outdoor event. What should the analyst do to determine if the video is authentic?

An OSINT analyst receives a digital image and needs to verify its provenance. Which technique directly examines the embedded metadata of the image file to look for camera model, timestamp, and GPS coordinates?

Keep studying — Advanced OSINT Tools and Techniques