Free GOSI Questions for GIAC Open Source Intelligence Certification GOSI GOSI Exam as PDF & Practice Test Engine

Exam Code/Number: GOSI
Exam Name/Title: GIAC Open Source Intelligence Certification GOSI
Certification Provider: GIAC
Corresponding Certification: GIAC Cyber Defense

Exam Questions: 100
Updated On: Oct 12, 2026

Question #1

You need to analyze potential phishing emails for an investigation.
What should you do first?

A. Click on all links to inspect their content

B. Forward them to your personal email

C. Open them in a sandboxed environment

D. Reply to the sender for verification

Discussion 0

Correct Answer: C Vote an answer

Question #2

What is the primary purpose of WHOIS lookups in OSINT investigations?

A. To delete a website from search engines

B. To hack into a target's web server

C. To retrieve domain registration details

D. To monitor encrypted communications

Discussion 0

Correct Answer: C Vote an answer

Question #3

What legal framework must OSINT analysts consider when collecting personal data?

A. DMCA and Copyright Act

B. HIPAA and PCI-DSS

C. GDPR, CCPA, and other regional data protection laws

D. SOC 2 and NIST 800-53

Discussion 0

Correct Answer: C Vote an answer

Question #4

What are two best practices when handling sensitive OSINT data? (Choose two)

A. Using personal email accounts for data retrieval

B. Encrypting research files before storing them

C. Backing up all OSINT data to a public cloud

D. Using disposable virtual machines (VMs) for investigations

Discussion 0

Correct Answer: B,D Vote an answer

Question #5

Which of the following is a best practice when handling sensitive OSINT data?

A. Keeping investigation notes in a publicly accessible forum

B. Encrypting all stored data using strong cryptographic methods

C. Sharing collected intelligence with third parties for analysis

D. Saving all research logs in cloud-based applications

Discussion 0

Correct Answer: B Vote an answer

Question #6

What information can be obtained from SSL/TLS certificate analysis? (Choose two)

A. Public key fingerprints

B. Domain ownership and issuance details

C. Live network traffic packets

D. Encrypted password hashes

Discussion 0

Correct Answer: A,B Vote an answer

Question #7

An OSINT analyst finds a leaked password database online.
What should they do before using the information?

A. Verify the source's credibility

B. Attempt to log into the affected accounts

C. Report it directly to the company's employees

D. Sell the information on a dark web forum

Discussion 0

Correct Answer: A Vote an answer

Question #8

What does Reverse IP Lookup allow an OSINT investigator to discover?

A. Encrypted data packets

B. Other websites hosted on the same server

C. The last login of the website owner

D. The name of the website administrator

Discussion 0

Correct Answer: B Vote an answer

Question #9

What are effective techniques for identifying a company's digital footprint? (Choose two)

A. Analyzing company financial audits

B. Searching employee email leaks

C. Creating fake job postings

D. Examining historical WHOIS records

Discussion 0

Correct Answer: B,D Vote an answer

Question #10

How can a business mitigate OSINT risks? (Choose two)

A. Removing old job postings with sensitive information

B. Implementing cyber hygiene training for employees

C. Disabling all cloud-based applications

D. Publishing all security policies online

Discussion 0

Correct Answer: A,B Vote an answer

Free GOSI Questions for GIAC Open Source Intelligence Certification GOSI GOSI Exam as PDF & Practice Test Engine

Download Free GIAC GOSI Demo