GIAC Offensive AI Analyst GOAA
100 real GIAC / SANS GOAA questions with answers checked by certified engineers. Start free, upgrade when you are ready.
- Questions
- 100
- Exam code
- GOAA
- Last updated
- Oct 17, 2026
- Language
- English
- Certification
- GIAC Offensive AI Analyst
Try GOAA free
Open a PDF shared by candidates who sat the exam, or answer questions in the online test engine.
- GOAA practice questions (PDF)10questionsOpen and downloadu/cosmic_widget_66
- GOAA practice questions (PDF)10questionsOpen and downloadu/Kind-Cluster-8056
Free files are partial. Full access has all 100 questions.
Free online test engine
Practise GOAA questions in your browser and see how the real exam is set out.
Start the free testGOAA sample questions
2 questions from the GOAA practice set, with the answer and explanation.
- Question 1What is a vector database designed to store and retrieve efficiently?
- A.Embeddings, which are numeric vectors used for similarity search
- B.Compiled executables prepared for GPU inference on a single server
- C.Plain-text transcripts of every conversation a model has ever held with users
- D.Encrypted copies of the training checkpoints kept for disaster recovery purposes
Show answerHide answer
Correct answer:
- A.Embeddings, which are numeric vectors used for similarity search
Explanation
A vector database indexes embeddings so that queries can find items with similar meaning, which is the retrieval step in many RAG systems. Transcript storage is the tempting distractor because conversation logs are also a common data store, but they are not indexed by semantic similarity. Compiled executables and checkpoint backups are unrelated to similarity search. - A.
- Question 2Which two principles of influence are most often used in pretexting during a social engineering assessment? (Choose two.)
Choose 2.
- A.Authority, such as a caller posing as an executive or the IT help desk
- B.Random number generation used for session token creation
- C.Certificate pinning configured on the corporate mail client
- D.Full-disk encryption protected with a hardware security key
- E.Urgency, such as a deadline that discourages the target from checking the request
Show answerHide answer
Correct answers:
- A.Authority, such as a caller posing as an executive or the IT help desk
- E.Urgency, such as a deadline that discourages the target from checking the request
Explanation
Pretexts rely on authority, because people comply with requests that appear to come from a senior or official source, and urgency, because a deadline reduces the time for verification. Certificate pinning is the tempting distractor since it appears in mail security discussions, but it is a technical control that does not persuade anyone. Session tokens and disk encryption are also technical controls and are unrelated to influence. - A.
About GIAC / SANS GOAA
Related Practice Questions
GOAA FAQ
What is the GIAC / SANS GOAA exam?
GOAA is the GIAC Offensive AI Analyst exam from GIAC / SANS. The exam runs for 120 minutes.
How many questions are in the GOAA practice set?
The full GOAA practice set has 100 questions with answers.
Can I try GOAA practice questions for free?
Yes. This page has 2 free GOAA PDF files shared by other candidates, and a free online test engine where you can answer GOAA questions in your browser. No account is needed.
What formats are the GOAA practice questions available in?
GOAA practice questions are available in these formats: PDF and Online Practice Exam. You can also get them together in a bundle.
How much does GOAA practice material cost?
GOAA practice material starts from $59 USD.
Are these the actual GOAA exam questions?
No. They are exam-style practice questions written from the official GOAA exam objectives, not actual exam content.
Reviews and Discussion
Loading comments