A penetration testing team is assessing the exposure of their organization's credentials on public code repositories. They want to automate the scanning of GitHub for any commits that might contain passwords or API keys. Which approach is most appropriate?

Ask GitHub support to scan for exposed credentials.

Manually search GitHub using the search bar for common password strings.

Use a tool like GitLeaks or TruffleHog to scan repositories for secrets.

Use a web scraper to download all public repositories and search for 'password' strings.

An analyst is tracking the movement of a suspicious cargo ship. They need to determine its recent ports of call and expected arrival time. Which combination of open-source information would be most useful?

Social media posts from the ship's crew and satellite images of the open ocean.

Weather reports and ocean current forecasts along the ship's likely route.

News articles about the shipping company and stock prices of the port authority.

Automatic Identification System (AIS) data from maritime tracking websites and port schedule publications.

An analyst is monitoring social media for mentions of a political event. The event name is ambiguous and could refer to other topics. The analyst wants to capture all relevant posts, including those with misspellings, while excluding unrelated uses. Which configuration is most effective?

Monitor only one social media platform to reduce volume.

Use only the event name as a keyword without any filters.

Set up alerts for the event name but only check them once a week.

Use Boolean operators to combine the event name with related terms, add negative keywords, and enable fuzzy matching.

Which type of open-source information is most directly related to transportation analysis?

Public transit schedules and route maps

Exposed API keys in public code

Password-protected corporate financial reports

Which action is a typical first step when using a third-party web-based monitoring tool to track a topic of interest?

Decrypting password-protected files containing the topic

Creating a monitoring alert with relevant keywords

Identifying transportation infrastructure near the topic

Scanning for exposed credentials in public datasets

GIAC Strategic OSINT Analyst

Domain 1Objective 2

Sector-Specific and Practical OSINT GSOA Practice Questions (Page 1)

Part of the OSINT Fundamentals and Global Context domain, which makes up ~44% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~31–53 in this domain), expect 16–27 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

5concepts

Questions 1–5

1application · medium
A penetration testing team is assessing the exposure of their organization's credentials on public code repositories. They want to automate the scanning of GitHub for any commits that might contain passwords or API keys. Which approach is most appropriate?
Select an answer first
2application · medium
An analyst is tracking the movement of a suspicious cargo ship. They need to determine its recent ports of call and expected arrival time. Which combination of open-source information would be most useful?
Select an answer first
3application · medium
An analyst is monitoring social media for mentions of a political event. The event name is ambiguous and could refer to other topics. The analyst wants to capture all relevant posts, including those with misspellings, while excluding unrelated uses. Which configuration is most effective?
Select an answer first
4foundation · easy
Which type of open-source information is most directly related to transportation analysis?
Select an answer first
5foundation · easy
Which action is a typical first step when using a third-party web-based monitoring tool to track a topic of interest?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSOA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSOA” is a trademark of its owner, used for identification only.