I85PREP
⌘ K
CSO study materials
CSO study resources

CSO (CDR) practice questions

One question at a time. Build your CSO understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Roles, Responsibilities and Professional Ethics

Which obligation is central to a compliance officer's duty of loyalty?

  1. Maximizing short-term profit despite regulatory exposure
  2. Following senior leader instructions without question
  3. Deferring all decisions to external counsel
  4. Acting in the organization's interest within legal limits Correct answer.

Explanation

The duty of loyalty requires serving the organization's legitimate interests, but it is bounded by law, regulation, and ethical standards. Obedience to instructions or pursuit of profit is never an absolute defense.

Question 2Roles, Responsibilities and Professional Ethics

In which situation may a professional disclose confidential information without the client's consent?

  1. When disclosure is required by law or a valid court order Correct answer.
  2. When disclosure would help the firm win new business
  3. When the client has delayed payment of an invoice
  4. When a colleague asks for background on the client's account

Explanation

Confidentiality yields where the law compels disclosure, and even then the disclosure should be limited to what is required and properly documented. Commercial disputes and business development pressures never justify breaching confidence.

Question 3Roles, Responsibilities and Professional Ethics

A compliance officer learns that a company under review is partly owned by the officer's spouse. What should the officer do first?

  1. Ask the spouse to sell the ownership interest immediately
  2. Proceed because the ownership is held indirectly
  3. Continue the review but avoid documenting the relationship
  4. Disclose the relationship and withdraw from the review Correct answer.

Explanation

A financial interest held through a family member creates a conflict of interest that must be disclosed and managed, normally by recusal from the affected work. Concealing the relationship or directing the spouse's finances is not an appropriate remedy.

Question 4Roles, Responsibilities and Professional Ethics

How should a professional maintain the competence required for their role?

  1. Delegate unfamiliar tasks without oversight
  2. Engage in continuing professional education Correct answer.
  3. Limit practice to routine matters only
  4. Rely on experience gained in earlier positions

Explanation

Competence requires keeping knowledge and skills current through structured learning and reflective practice, not merely tenure. Professionals must recognize the limits of their expertise and update it as rules and practices change.

Question 5Roles, Responsibilities and Professional Ethics

A vendor offers a compliance officer a valuable gift shortly before a contract decision. What is the appropriate response?

  1. Accept it because vendors often provide gifts
  2. Accept it only if the vendor delivers on time
  3. Accept it and keep it confidential from colleagues
  4. Decline it or disclose it under policy Correct answer.

Explanation

Gifts that could influence, or appear to influence, professional judgment must be declined or disclosed in line with the gifts and hospitality policy. The appearance of a conflict is as important as an actual conflict.

Question 6Roles, Responsibilities and Professional Ethics

An employee reports suspected accounting fraud. What is the compliance officer's first responsibility?

  1. Log it and start the established investigation Correct answer.
  2. Wait for the annual audit to review the matter
  3. Inform the suspected employees of the allegation
  4. Conduct a public announcement of the allegations

Explanation

Reports should be handled through documented, confidential investigation channels that protect the reporter and preserve evidence. Publicity or tipping off subjects can destroy evidence and unfairly damage reputations.

Question 7Roles, Responsibilities and Professional Ethics

How should a professional describe their qualifications on a client proposal?

  1. State only credentials and experience actually held Correct answer.
  2. Use titles that suggest broader authority than held
  3. Include certifications they plan to obtain soon
  4. Omit all qualifications to avoid scrutiny

Explanation

Accurate representation prevents misrepresentation and preserves trust. Planned, aspirational, or honorary titles must not be presented as current professional credentials.

Question 8Roles, Responsibilities and Professional Ethics

A senior executive pressures a compliance officer to soften a findings report before it goes to the board. What should the officer do?

  1. Keep the report accurate and escalate the pressure Correct answer.
  2. Soften the language but keep the facts unchanged
  3. Remove the findings and report only positive items
  4. Delay the report until the executive leaves the role

Explanation

Accuracy in board reporting cannot be compromised, because directors rely on it for oversight. Improper pressure should be documented and escalated, including to the audit committee if internal channels do not resolve it.

Question 9Roles, Responsibilities and Professional Ethics

A transaction shows several indicators of money laundering. What should the officer do?

  1. Report it through the designated channel Correct answer.
  2. Discuss the case with the customer's family
  3. Complete the transaction and monitor the account
  4. Confront the customer and demand an explanation

Explanation

Suspicious activity must be reported promptly through the prescribed internal or external channel, and tipping off the customer is typically prohibited. The officer should not confront the customer or complete the transaction as if it were routine.

Question 10Roles, Responsibilities and Professional Ethics

Why does segregation of duties reduce risk in a payment process?

  1. No single person controls every stage Correct answer.
  2. It increases the speed of transaction approval
  3. It guarantees that fraud cannot occur
  4. It removes the need for management review

Explanation

Splitting authorization, recording, and custody of assets makes concealment harder because wrongdoing would require collusion. It reduces risk but does not eliminate the need for review or oversight.

Question 11Roles, Responsibilities and Professional Ethics

A junior officer is asked to approve a transaction above their delegated limit. What should they do?

  1. Refer it to an authorized approver Correct answer.
  2. Decline it and close the client file
  3. Approve it and tell a manager only afterward
  4. Split the transaction into smaller parts

Explanation

Authority limits are a control, and transactions must be approved at the correct level. Structuring a transaction to avoid a limit is itself a red flag and may be treated as a control breach.

Question 12Roles, Responsibilities and Professional Ethics

When should a professional record the rationale for a significant compliance decision?

  1. At the end of the fiscal year
  2. At the time the decision is made Correct answer.
  3. When a colleague asks for an explanation
  4. Only if a regulator requests it later

Explanation

Contemporaneous records preserve accuracy, support accountability, and provide evidence of the reasoning behind a decision. Reconstructing a rationale later is less reliable and can appear self-serving.

Question 13Roles, Responsibilities and Professional Ethics

An officer learns non-public information that could move a company's share price. What is the proper course?

  1. Wait one week before trading to avoid suspicion
  2. Share the information with close friends
  3. Trade through a family member's account
  4. Abstain from trading and report the matter Correct answer.

Explanation

Material non-public information must not be used for trading or passed to others, because doing so breaches insider-dealing rules. The circumstances of how the information was handled should be reported to the appropriate function.

Question 14Roles, Responsibilities and Professional Ethics

A customs official requests a small cash payment to release legitimate goods quickly. What should the officer do?

  1. Pay it and record it as a processing fee
  2. Ask the official for a receipt first
  3. Refuse and escalate under anti-bribery policy Correct answer.
  4. Pay it because the amount is small

Explanation

So-called facilitation payments are treated as bribes in many jurisdictions and must be refused and escalated. The size of the payment does not alter its character.

Question 15Roles, Responsibilities and Professional Ethics

Management provides a written representation that a control operates effectively. What should the officer do?

  1. Accept the claim because it was provided in writing
  2. Ignore it and assume the control fails
  3. Accept it if the manager is senior
  4. Obtain corroborating evidence before relying Correct answer.

Explanation

Written representations support, but do not replace, evidence. Professional skepticism requires corroboration from independent sources before reliance.

Question 16Roles, Responsibilities and Professional Ethics

A client privately tells an officer they intend to seriously harm a named person. What is the appropriate response?

  1. Report it to the media to ensure public safety
  2. Warn the person only after obtaining client consent
  3. Keep the confidence absolutely in all cases
  4. Disclose the minimum necessary to prevent the harm Correct answer.

Explanation

Confidentiality can be overridden to prevent serious harm, but disclosure should be limited to those who need it and to what is necessary. Consent cannot always be obtained, and broad publicity is disproportionate.

Question 17Roles, Responsibilities and Professional Ethics

A client asks the compliance officer for a legal opinion on a new regulation. What is the best response?

  1. Interpret the regulation from memory
  2. Decline all further contact with the client
  3. Refer the matter to qualified counsel Correct answer.
  4. Provide an informal legal opinion

Explanation

Professionals should operate within their competence, and legal interpretation belongs to qualified legal counsel. Referral protects the client and preserves the professional relationship.

Question 18Roles, Responsibilities and Professional Ethics

An officer realizes they approved a payment that violated policy. What should they do?

  1. Wait to see whether anyone notices
  2. Disclose the error and take steps to remediate Correct answer.
  3. Correct the record quietly without telling anyone
  4. Blame the system and take no action

Explanation

Accountability requires prompt acknowledgment of errors, remediation of any harm, and strengthening of controls to prevent recurrence. Concealment or delay prolongs and may worsen the consequences.

Question 19Roles, Responsibilities and Professional Ethics

An officer wants to post about a recent client engagement on social media. What should guide the decision?

  1. Whether the client is likely to see the post
  2. Whether colleagues have posted similar items
  3. Whether the post will attract new clients
  4. Whether it reveals confidential information Correct answer.

Explanation

Public posts must not disclose confidential or identifying client information without authorization. Marketing value and industry practice do not override confidentiality obligations.

Question 20Roles, Responsibilities and Professional Ethics

An officer finds evidence that a product poses a serious safety risk. Management decides to keep selling it and instructs silence. What is the most defensible course?

  1. Leak the documents anonymously to a blog
  2. Escalate internally, then report if unresolved Correct answer.
  3. Resign quietly and say nothing further
  4. Follow the instruction because management owns the decision

Explanation

Where public safety is at risk, internal governance channels should be used first, and escalation to the regulator may be justified if those fail. Whistleblower protections may apply to such reports.

Question 21Roles, Responsibilities and Professional Ethics

A long-serving compliance officer has reviewed the same business unit for six years and is close to its leadership. Which action best protects independence?

  1. Rotate the review or add independent oversight Correct answer.
  2. Delegate the work to a junior officer without supervision
  3. Continue the review but disclose the relationship at year end
  4. Increase the review scope to compensate

Explanation

Familiarity and self-review threats are addressed by rotation or independent oversight, not merely by disclosure. Simply expanding the same reviewer's scope does not restore objectivity.

Question 22Roles, Responsibilities and Professional Ethics

A manager tells an officer to delete working papers that support an unfavorable finding. What should the officer do?

  1. Move them to an unshared drive and say nothing
  2. Delete them because the manager is senior
  3. Preserve the records and escalate the instruction Correct answer.
  4. Delete them but keep personal notes

Explanation

Destroying evidence obstructs governance and may be unlawful. Records relevant to a finding must be preserved, and the instruction should be escalated to an appropriate authority.

Question 23Roles, Responsibilities and Professional Ethics

A new vendor is registered in a high-risk jurisdiction and refuses to identify its owners. What should the officer do?

  1. Complete enhanced due diligence before onboarding Correct answer.
  2. Onboard the vendor because the contract value is low
  3. Rely on the sales team's recommendation
  4. Ask the vendor to sign a general ethics statement only

Explanation

Ownership opacity and high-risk geography are red flags that require enhanced due diligence, including verification of beneficial ownership. A low contract value does not reduce the underlying risk.

Question 24Roles, Responsibilities and Professional Ethics

A situation arises that the code of conduct does not directly address. What is the best approach?

  1. Choose the option that is fastest to implement
  2. Apply core principles and seek ethics guidance Correct answer.
  3. Act on personal preference without discussion
  4. Wait until a precedent is published by a competitor

Explanation

When rules are silent, the code's underlying principles plus consultation with the ethics function provide a defensible decision process. Speed and personal preference are not ethical criteria.

Question 25Legal Authority, Liability and Use of Force

A private security officer who is not a sworn law enforcement officer generally may arrest a person when which condition is met?

  1. The officer wants to question the person about a past incident
  2. The officer has a hunch the person committed a crime earlier that day
  3. A felony is being committed in the officer's presence Correct answer.
  4. A bystander says the person looks suspicious

Explanation

A private person's arrest authority is narrow: it typically covers a felony or breach of the peace committed in the arrester's presence, plus whatever additional authority state statute grants. Hunches, vague suspicions, and a wish to question someone fall short of that standard.

Question 26Legal Authority, Liability and Use of Force

The core legal standard for judging a security officer's use of force is that the force must be:

  1. Objectively reasonable and proportional to the threat Correct answer.
  2. Applied only after the officer has been struck
  3. Greater than the resistance offered to ensure compliance
  4. Approved in advance by law enforcement

Explanation

Force is measured by an objective standard: whether a reasonable officer facing the same facts would regard the force as necessary and proportional. The level of force must also be reduced or stopped as the threat diminishes.

Question 27Legal Authority, Liability and Use of Force

A security officer may use deadly force only when:

  1. Valuable property is being damaged and no one is at risk
  2. A suspect refuses to obey verbal commands
  3. The suspect is fleeing with stolen merchandise
  4. An imminent threat of death or serious harm exists Correct answer.

Explanation

Deadly force is confined to situations where the officer reasonably believes it is necessary to prevent imminent death or serious bodily injury to themselves or another person. It may never be used solely to protect property.

Question 28Legal Authority, Liability and Use of Force

Which best states the proper legal basis for applying handcuffs to a person a security officer has detained?

  1. To make transport faster for the officer
  2. Because all detainees are automatically restrained regardless of behavior
  3. To punish the person for resisting earlier
  4. To prevent escape or injury when a reasonable risk is present Correct answer.

Explanation

Restraints are a use of force and need an individualized justification, such as a risk of escape, harm to self or others, or destruction of evidence. Applying them out of habit or as punishment is unlawful and supports a civil claim.

Question 29Legal Authority, Liability and Use of Force

After a security officer uses force on a subject, the officer should generally:

  1. Document the force used, the reasons, and any injuries promptly Correct answer.
  2. Omit details that could be used against the officer in court
  3. Report it only if a supervisor witnessed the incident
  4. Wait to see whether the subject complains before writing anything

Explanation

Prompt and complete documentation is both a professional duty and the officer's strongest evidence that the force was reasonable. Gaps or omissions in the record are typically read against the officer in later proceedings.

Question 30Legal Authority, Liability and Use of Force

The Fourth Amendment's reasonableness and warrant requirements generally apply to searches conducted by:

  1. All security guards regardless of employment status
  2. Government actors and those acting as their agents Correct answer.
  3. Only federal law enforcement agents
  4. Any private citizen acting on their own initiative

Explanation

Fourth Amendment limits attach to government action, including private persons acting as agents or instruments of the state. Purely private security conduct is instead governed by tort law, contract, and state statutes.

Question 31Legal Authority, Liability and Use of Force

An intruder is climbing a fence to steal tools from a fenced yard. Under the general common-law rule, the guard may:

  1. Use any force available since property owners have absolute rights
  2. Use deadly force because burglary is a felony
  3. Shoot to wound the intruder to protect the tools
  4. Use non-deadly force reasonably necessary to stop the theft Correct answer.

Explanation

Deadly force cannot be used solely to protect property; the lawful response is limited to reasonable non-deadly force to prevent the trespass or theft. The force must also cease once the threat to the property ends.

Question 32Legal Authority, Liability and Use of Force

A store officer reasonably believes a customer concealed merchandise and holds the person in a back office for 90 minutes before police arrive. The greatest legal risk is:

  1. Negligent hiring of the officer
  2. Criminal trespass by the officer
  3. Defamation of the customer's reputation
  4. False imprisonment because the detention lasted too long Correct answer.

Explanation

The shopkeeper's privilege permits a detention that rests on reasonable grounds, lasts a reasonable time, and is carried out in a reasonable manner. A long back-room hold without prompt police involvement commonly exceeds that privilege and supports a false imprisonment claim.

Question 33Legal Authority, Liability and Use of Force

False imprisonment requires which combination of elements?

  1. Physical injury plus a written confession
  2. A criminal conviction followed by release
  3. Verbal abuse and a threat of future litigation
  4. Intentional confinement without consent or legal authority Correct answer.

Explanation

False imprisonment is the intentional confinement of a person without consent or lawful authority. Physical injury is not required, and confinement may be accomplished by barriers, threats, or asserted authority.

Question 34Legal Authority, Liability and Use of Force

A claim of self-defense is generally justified only when the perceived threat is:

  1. Possible at some point in the future
  2. Based on the person's reputation for violence
  3. Rumored by a third party
  4. Imminent and reasonably perceived Correct answer.

Explanation

Self-defense requires an imminent threat, meaning one that is about to occur, as reasonably perceived by the defender under the circumstances. Speculative, future, or reputational threats do not justify force.

Question 35Legal Authority, Liability and Use of Force

A security officer uses force beyond what is legally justified and injures a subject. Which civil claim fits most directly?

  1. Trespass to land
  2. Conversion
  3. Battery Correct answer.
  4. Breach of contract

Explanation

An unjustified intentional touching, including excessive force during a detention, is battery. Reasonable force within legal limits is privileged, so the claim turns on whether the force exceeded that justification.

Question 36Legal Authority, Liability and Use of Force

Under respondeat superior, an employer is typically liable for a security officer's use of excessive force when the officer:

  1. Was acting within the scope of employment at the time Correct answer.
  2. Was off duty and acting for personal reasons
  3. Committed an intentional crime unrelated to work
  4. Acted outside any authority the employer gave

Explanation

Respondeat superior makes an employer liable for torts an employee commits while acting within the scope of employment. Conduct that is purely personal or wholly outside the job generally falls outside the doctrine.

Question 37Legal Authority, Liability and Use of Force

A security supervisor watches a subordinate use clearly excessive force and does nothing. The supervisor:

  1. Is protected because supervisors only give orders
  2. Can only be disciplined administratively, never sued
  3. Has no duty because the subordinate acted alone
  4. May be held liable for failing to intervene to stop the force Correct answer.

Explanation

A supervisor who sees excessive force and fails to act can be liable for failing to intervene when there was a realistic opportunity to stop it. Separate supervisory liability may also attach for deliberate indifference.

Question 38Legal Authority, Liability and Use of Force

After a subject has been restrained face-down and control is secure, best practice is to:

  1. Tighten restraints to prevent any movement
  2. Reposition to seated or recovery position and monitor breathing Correct answer.
  3. Keep full body weight on the back until transport arrives
  4. Leave the subject alone to calm down

Explanation

Prolonged prone restraint with weight on the back can cause positional asphyxia, a recognized cause of in-custody death. Once control is secure, the person should be moved to a seated or recovery position and continuously monitored.

Question 39Legal Authority, Liability and Use of Force

A lawful temporary detention by a security officer must be:

  1. Continued until police arrive regardless of delay
  2. Extended until the person confesses
  3. Limited in time and scope to its purpose Correct answer.
  4. Conducted in a locked room without exceptions

Explanation

An investigative detention must remain temporary and tied to the reason it began, ending or escalating to a lawful arrest once that purpose is fulfilled. Detention cannot be stretched out as leverage to extract a confession.

Question 40Legal Authority, Liability and Use of Force

To recover for negligence against a security company, a plaintiff must show:

  1. Intent to harm and malice
  2. Duty, breach, causation, and damages Correct answer.
  3. A criminal conviction of the guard
  4. Only that an injury occurred on the premises

Explanation

Negligence requires a duty of care owed to the plaintiff, a breach of that duty, actual and proximate causation, and resulting damages. Intent plays no role, which is why careless rather than deliberate conduct can support the claim.

Question 41Legal Authority, Liability and Use of Force

An off-duty police officer working as a private mall guard detains and searches a suspected shoplifter. A court is most likely to treat the search as governmental action if the officer:

  1. Had a personal grudge against the suspect
  2. Wore a mall uniform and was paid only by the mall
  3. Completed the detention quickly and without incident
  4. Relied on police powers or department direction to detain Correct answer.

Explanation

A sworn officer privately employed is treated as a state actor when acting under color of law, such as using police authority, equipment, or departmental direction. Private uniform and private pay point toward private action instead.

Question 42Legal Authority, Liability and Use of Force

Qualified immunity, which shields government officers from certain civil suits, is generally:

  1. Available whenever the guard followed company policy
  2. Available to any licensed security guard
  3. Available only in criminal prosecutions
  4. Unavailable to private guards sued as private parties Correct answer.

Explanation

Qualified immunity is a defense for government officials accused of constitutional violations and does not protect purely private security officers. Following company policy may bear on negligence but creates no constitutional immunity.

Question 43Legal Authority, Liability and Use of Force

Under the modern constitutional standard, deadly force may not be used against a fleeing suspect unless the officer has probable cause to believe the suspect:

  1. Refuses to stop when ordered
  2. Has committed any felony
  3. Is carrying stolen property
  4. Poses a significant threat of death or serious harm to others Correct answer.

Explanation

Deadly force against a fleeing suspect is unreasonable unless there is probable cause to believe the suspect poses a significant threat of death or serious physical injury to the officer or others. The seriousness of the offense label alone is not enough.

Question 44Legal Authority, Liability and Use of Force

Which statement correctly distinguishes assault from battery in a use-of-force claim?

  1. Battery requires proof of an intent to kill
  2. Assault is apprehension of contact; battery is a touching Correct answer.
  3. Assault and battery are the same tort in every jurisdiction
  4. Assault requires physical contact; battery requires only words

Explanation

Assault protects against the apprehension of imminent harmful or offensive contact, while battery is the actual unlawful touching. Battery can occur without assault, and assault can occur with no contact at all.

Question 45Patrol, Observation and Incident Reporting

What is the primary purpose of a visible, uniformed patrol presence at a facility?

  1. To guarantee that no incident can occur on the property
  2. To allow officers to complete reports without leaving the patrol vehicle
  3. To replace the need for access control systems
  4. To deter wrongdoing through visible security presence Correct answer.

Explanation

Visible patrol increases the perception that activity is being observed, which deters many potential wrongdoers. It supports security but cannot guarantee that no incident will occur, nor does it replace access control or reporting duties.

Question 46Patrol, Observation and Incident Reporting

Upon arriving at the scene of a medical emergency, what should the patrol officer do first?

  1. Begin interviewing bystanders to identify witnesses
  2. Start writing the incident report while details are fresh
  3. Check the scene for hazards and ensure safety Correct answer.
  4. Move the patient to a more comfortable location

Explanation

Scene safety comes before patient care, witness contact, or documentation. An officer who is injured or exposed to a hazard cannot help others and may become part of the emergency.

Question 47Patrol, Observation and Incident Reporting

Which of the following entries in a security log is the most objective?

  1. Subject looked into three parked cars at 22:15. Correct answer.
  2. The subject was obviously a troublemaker.
  3. The subject seemed like he was up to no good and probably planned trouble.
  4. The subject was acting suspiciously as usual.

Explanation

Objective entries describe observable actions, times, and locations rather than conclusions about a person's character. Specific observations can later be evaluated by others.

Question 48Patrol, Observation and Incident Reporting

When using a two-way radio for routine traffic, which practice is correct?

  1. Hold the radio close and whisper to avoid being overheard
  2. Speak loudly and rapidly to save airtime
  3. Use informal slang so other officers understand quickly
  4. Identify yourself and speak briefly and clearly Correct answer.

Explanation

Routine radio traffic should be clear, brief, and identifiable so others know who is transmitting. Slang, whispering, and rapid speech reduce intelligibility.

Question 49Patrol, Observation and Incident Reporting

When should a security officer complete the written incident report?

  1. Only if a supervisor requests one
  2. As soon as practicable after the incident, while details are fresh Correct answer.
  3. At the end of the pay period to save administrative time
  4. After discussing the incident with other officers so stories match

Explanation

Reports should be completed promptly because memory fades and details become less reliable over time. Coordinating stories with others undermines independent observation and accuracy.

Question 50Patrol, Observation and Incident Reporting

A key advantage of foot patrol over vehicle patrol is:

  1. Less need to record patrol activity
  2. Closer observation and easier contact with people Correct answer.
  3. Faster response time across a very large campus or industrial site
  4. It removes the need for radio communication

Explanation

Foot patrol allows an officer to notice small details and interact more easily with people. Vehicle patrol may cover distance faster but can reduce close observation.