GIAC GSOA: GIAC Strategic OSINT Analyst

Last checked October 22, 2026 against the official GIAC exam page.

1. Question 1Reporting and intelligence products

   A report recommends action on a supplier. Which section should show how confident the analyst is in the key judgements?

   1. AThe appendix with raw screenshots and unannotated source captures in bulk
   2. BThe cover page colour scheme, chosen to match the brand guidelines of the company being assessed
   3. CThe author biography and the analyst's prior publications on related topics
   4. DKey judgements, with an explicit confidence statement and the evidence behind them
   Show answer and explanationHide answer

   Correct answer: D

   Key judgements with explicit confidence and evidence let decision-makers judge the recommendation. Raw screenshots, cover colours, and author biographies do not convey confidence.

2. Question 2Strategic analysis and forecasting

   A strategic analyst must estimate whether a competitor will enter a new market within two years. Which kind of judgement is this?

   1. AA list of present facts about the market, with no forecast
   2. BA certainty that the competitor will enter the market soon
   3. CA personal opinion offered with no supporting evidence or reasoning trail
   4. DA forecast with an explicit time horizon and probability language
   Show answer and explanationHide answer

   Correct answer: D

   A forecast with a time horizon and probability language is the appropriate form for future-oriented judgements. Certainty, current facts, and unsupported opinion do not fit.

3. Question 3Investigation workflow

   An investigation has many open leads. Which practice helps the analyst prioritise effectively?

   1. APursue the most exciting lead regardless of relevance, and follow whichever story attracts the most attention
   2. BRank leads by relevance to the requirement, reliability, and the time available to pursue them
   3. CPursue the leads in alphabetical order by the first letter of each organisation's name, regardless of case
   4. DPursue every lead at once without recording progress or tracking status for each item
   Show answer and explanationHide answer

   Correct answer: B

   Ranking by relevance, reliability, and time makes the investigation efficient. Alphabetical order, excitement, and unstructured pursuit waste effort.

4. Question 4Operational security and legal limits

   An analyst uses a research account for investigations. Which practice protects the analyst and the investigation?

   1. ASeparate research accounts and devices from personal accounts and devices
   2. BShare one research account across the team with the password in a public document
   3. CLog in with an employee's account without permission
   4. DUse personal accounts for all research
   Show answer and explanationHide answer

   Correct answer: A

   Separating research from personal accounts reduces exposure and attribution risk. Personal accounts, public passwords, and unauthorised use of others' accounts are unsafe or unlawful.

5. Question 5Source evaluation and reliability

   An analyst evaluates a website that publishes industry statistics. Which factor most affects how much weight to give the statistics?

   1. AThe number of advertisements and affiliate banners displayed on the page
   2. BThe length of the domain name and the count of its letters and digits
   3. CThe publisher's transparency about methods, sources, and dates
   4. DThe website's colour scheme and the fonts chosen for its layout grid
   Show answer and explanationHide answer

   Correct answer: C

   Transparent methods, sources, and dates let the analyst judge reliability. Colours, advertisements, and domain length are weak indicators of reliability.