
GIAC Strategic OSINT Analyst
Domain 1Objective 1
OSINT and International Environment GSOA Practice Questions (Page 5)
Part of the OSINT Fundamentals and Global Context domain, which makes up ~44% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~31–53 in this domain), expect 16–27 from this objective — we provide 39 practice questions to prepare you well beyond it. (estimate)
39questions here
8free pages
4concepts
Questions 21–25
- 21
A corporate security team is assessing a former employee who has made vague threats online. The individual has a history of posting aggressive content but no prior violence. Which approach best evaluates the potential risk posed by this individual?
Select an answer first - 22
An analyst reviews a social media post that uses a dramatic headline, cites an unnamed 'insider source', and includes a grainy image with no date or location metadata. Which combination of indicators most strongly suggests the post is disinformation?
Select an answer first - 23
An analyst is assessing a newly formed activist group that has been organizing protests against a mining company. The group's social media posts are highly emotional and include calls for 'economic sabotage' against the company's operations. The group has no known history of violence, but some members have shared posts about past attacks on mining sites in other countries. The analyst must determine the group's potential for violence. Which combination of factors is most significant?
Select an answer first - 24
An analyst is evaluating a news article for reliability. Which combination of factors should be prioritized when assessing the credibility of the information?
Select an answer first - 25
An analyst is monitoring a foreign-language social media platform for narratives about a multinational corporation. A newly created account posts a dramatic video claiming the company is secretly dumping toxic waste in a protected river. The video shows no identifiable location, uses generic stock footage, and the account has no prior history. The claim is being amplified by several other accounts created within the same hour. Which combination of actions best supports a disinformation assessment?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSOA” is a trademark of its owner, used for identification only.