GIAC Open Source Intelligence Certification GOSI Sample Questions:

1. When performing OSINT on an individual, what online sources are commonly used to verify employment history? (Choose two)

A) Breach databases
B) Court filings
C) LinkedIn
D) WHOIS records

2. You need to analyze potential phishing emails for an investigation.
What should you do first?

A) Forward them to your personal email
B) Open them in a sandboxed environment
C) Reply to the sender for verification
D) Click on all links to inspect their content

3. What OSINT tools are commonly used to extract personal details and connections from social media profiles? (Choose two)

A) Creepy
B) TheHarvester
C) Metasploit
D) Maltego

4. What is the primary purpose of WHOIS lookups in OSINT investigations?

A) To delete a website from search engines
B) To monitor encrypted communications
C) To hack into a target's web server
D) To retrieve domain registration details

5. Scenario: A company is concerned about its social media exposure.
What is the best OSINT method to assess their risks?

A) Conduct DDoS attacks against business accounts
B) Use phishing techniques against employees
C) Perform automated social media scraping
D) Buy personal data from data brokers

Solutions: