An analyst has a password-protected archive file that is believed to contain a list of compromised credentials. The analyst has a wordlist and a tool that supports both dictionary and brute-force attacks. The analyst knows the password is a six-character string that includes at least one digit. Which attack strategy is most efficient?

Run a full brute-force attack that tries all combinations of letters and digits up to six characters.

Try to bypass the archive encryption by modifying the file header.

Use a rule-based attack that appends digits to words from the wordlist.

Run a dictionary attack first, then a mask attack for six-character passwords with at least one digit.

An analyst is investigating a suspect's possible use of a specific bus route. The analyst has found a bus schedule PDF online but it is outdated. Which additional open-source source should the analyst consult to verify the current schedule?

The transit agency's official website or mobile app for the latest schedule.

A news article about the bus route from five years ago.

A map of the city from a real estate website.

A third-party forum where users discuss bus delays.

An analyst is investigating a suspect's possible use of public transportation in a city. The analyst wants to determine if the suspect could have traveled from a specific subway station to a known location at a certain time. Which open-source data would be most helpful?

A weather website showing historical weather on the date of interest.

The suspect's social media check-ins at restaurants near the station.

The city's public transit authority website with route maps and schedules.

A real estate website listing property prices in the area.

Which type of data is most commonly targeted by automated credential scanning tools?

API keys and passwords in public code repositories

Password-protected file contents

GIAC Strategic OSINT Analyst

Domain 1Objective 2

Sector-Specific and Practical OSINT GSOA Practice Questions (Page 5)

Part of the OSINT Fundamentals and Global Context domain, which makes up ~44% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~31–53 in this domain), expect 16–27 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

5concepts

Questions 21–25

21expert · hard
An analyst has a password-protected archive file that is believed to contain a list of compromised credentials. The analyst has a wordlist and a tool that supports both dictionary and brute-force attacks. The analyst knows the password is a six-character string that includes at least one digit. Which attack strategy is most efficient?
Select an answer first
22application · medium
An analyst is investigating a suspect's possible use of a specific bus route. The analyst has found a bus schedule PDF online but it is outdated. Which additional open-source source should the analyst consult to verify the current schedule?
Select an answer first
23foundation · easy
An analyst wants to monitor a topic but exclude results that are irrelevant due to common but unrelated uses of a keyword. Which monitoring parameter is designed to address this?
Select an answer first
24application · medium
An analyst is investigating a suspect's possible use of public transportation in a city. The analyst wants to determine if the suspect could have traveled from a specific subway station to a known location at a certain time. Which open-source data would be most helpful?
Select an answer first
25foundation · easy
Which type of data is most commonly targeted by automated credential scanning tools?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSOA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSOA” is a trademark of its owner, used for identification only.