GIAC Offensive AI Analyst (GOAA) Exam Syllabus
Use this quick start guide to collect all the information about GIAC GOAA Certification exam. This study guide provides a list of objectives and resources that will help you prepare for items on the GIAC Offensive AI Analyst (GOAA) exam. The Sample Questions will help you identify the type and difficulty level of the questions and the Practice Exams will make you familiar with the format and environment of an exam. You should refer this guide carefully before attempting your actual GIAC Offensive AI Analyst (GOAA) certification exam.
The GIAC GOAA certification is mainly targeted to those candidates who want to build their career in Artificial Intelligence domain. The GIAC Offensive AI Analyst (GOAA) exam verifies that the candidate possesses the fundamental knowledge and proven skills in the area of GIAC GOAA.
GIAC GOAA Exam Summary:
| Exam Name | GIAC Offensive AI Analyst (GOAA) |
| Exam Code | GOAA |
| Exam Price | $999 (USD) |
| Duration | 120 mins |
| Number of Questions | 56 |
| Passing Score | 67% |
| Books / Training | SEC535: Offensive AI - Attack Tools and Techniques |
| Schedule Exam | PearsonVUE |
| Sample Questions | GIAC GOAA Sample Questions |
| Practice Exam | GIAC GOAA Certification Practice Exam |
GIAC GOAA Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Artificial Intelligence Fundamentals | - Candidates will demonstrate an understanding of core AI concepts—natural-language processing (NLP); generative techniques such as generative adversarial networks (GAN) and retrieval-augmented generation (RAG); vector databases; and custom GPTs/assistants. They will distinguish between adversarial and offensive AI and show familiarity with both commercial and open-source AI platforms. |
| Audio, Image, and Video Deepfakes | - Candidates will demonstrate an understanding of tools and techniques for creating audio, image, and video deepfakes for social-engineering attacks, including the key components—e.g., speech elements—needed to produce convincing content. |
| Bypassing Defensive Controls | - Candidates will explain techniques for evading defensive controls, describe Windows Defender architecture and its exploitable components, and apply AI models to achieve effective defense bypass. |
| Creating Malicious Software with AI | - Candidates will demonstrate understanding of how AI models can be used to generate malware samples for ethical penetration-testing use and craft prompts that bypass large-language-model security guardrails. |
| Creating Phishing Emails with AI | - Candidates will demonstrate an understanding of tools such as GoPhish and the Social Engineering Toolkit (SET) and apply prompt-engineering techniques to craft high-quality phishing emails. |
| Malware Fundamentals | - Candidates will demonstrate an understanding of malware fundamentals—payloads, exploits, propagation vectors, droppers, and downloaders—and explain common persistence, anti-detection and anti-analysis mechanisms. |
| Network Scanning and Vulnerability Detection | - Candidates will demonstrate an understanding of network-enumeration and vulnerability-scanning methodologies and tools, and integrate scan outputs into AI-agent workflows to identify and contextualize vulnerabilities. |
| Social Engineering Fundamentals | - Candidates will demonstrate an understanding of social-engineering attack surfaces, objectives, and psychology in penetration testing, and articulate the associated legal and ethical considerations. |
| Using AI for OSINT | - Candidates will demonstrate an understanding of the reconnaissance phase of penetration testing, apply AI safely and ethically during OSINT activities, and identify common OSINT data-gathering tools. |
| Using AI for Web Exploitation | - Candidates will demonstrate an understanding of how AI-powered tools can be leveraged to streamline workflow and execute precise web-application attacks, including SQL-injection and command-injection techniques. |
To succeed in the GIAC GOAA certification exam, we recommend an authorized training course, practice tests and hands-on experience while you prepare for the GIAC Offensive AI Analyst (GOAA) exam. Have questions about the exam format, difficulty or passing score? Our GIAC GOAA exam FAQs answer them.
