I85PREP
⌘ K
MO Private Investigator study materials
MO Private Investigator study resources

MO Private Investigator practice questions

One question at a time. Build your MO Private Investigator understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Investigative Principles and Practices

Under Missouri law, a licensed private investigator's authority to conduct investigations is best described in which way?

  1. It automatically includes the power to make warrantless arrests
  2. It is limited to the specific license classification and endorsements the investigator holds Correct answer.
  3. It covers only work performed for attorneys of record
  4. It extends to any investigative activity once the license is issued

Explanation

Missouri regulates private investigators through license classifications, and the scope of authorized activity follows the class of license and any endorsements held. A license does not create general police powers, and arrest authority is not conferred by private investigator licensure.

Question 2Investigative Principles and Practices

A Missouri private investigator is hired to locate a debtor. Which source is generally the most productive starting point for establishing current residence?

  1. A current utility connection or recent address history compiled from public records Correct answer.
  2. A neighbor's recollection from a decade earlier
  3. The debtor's high school yearbook
  4. A recorded deed from twelve years ago

Explanation

Locating a subject begins with the most recent and reliable indicators of residence, such as current utility connections and recent address histories drawn from public and commercial records. Older documents and distant recollections establish past, not present, location.

Question 3Investigative Principles and Practices

In an investigation report, the distinction between an inference and an observation matters because:

  1. Only inferences may be recorded in field notes
  2. Observations must be corroborated while inferences stand alone
  3. Observations record directly perceived facts, while inferences are conclusions drawn from those facts and must be labeled as such Correct answer.
  4. Inferences are always inadmissible in court

Explanation

Reports carry evidentiary weight when they separate what the investigator directly perceived from what the investigator concluded. Labeling inferences prevents a reader or fact-finder from mistaking a deduction for a witnessed fact.

Question 4Investigative Principles and Practices

During a surveillance, the investigator must document a subject's movements for later use. Which practice best preserves the evidentiary value of the record?

  1. A summary written from memory at the end of the week
  2. Contemporaneous time-stamped notes recording direction, distance, and identifying details Correct answer.
  3. A narrative that omits times to avoid inconsistency
  4. Only photographs, with no written log

Explanation

Contemporaneous, time-stamped logs capture detail while memory is fresh and create a record that can withstand scrutiny. Delayed summaries and undated narratives invite challenges to accuracy and completeness.

Question 5Investigative Principles and Practices

Which statement correctly describes the investigator's obligation when conducting a recorded interview of a witness who has not been charged with an offense?

  1. The investigator may alter the recording to remove irrelevant portions
  2. The investigator may promise leniency in exchange for a statement
  3. The investigator must obtain consent to record where required and accurately preserve the witness's own words Correct answer.
  4. The investigator must give Miranda warnings before any questioning

Explanation

Miranda warnings attach to custodial interrogation by government agents, not to private investigators questioning a witness. The investigator's obligations are to comply with consent and recording requirements and to preserve statements faithfully.

Question 6Investigative Principles and Practices

An investigator is retained to verify an insurance claimant's asserted injury. Which approach best reflects sound investigative method?

  1. Assume fraud because a claim was filed
  2. Rely on the claimant's self-report and close the file
  3. Gather documentary and observational evidence, then compare it against the claim Correct answer.
  4. Confront the claimant at home without preparation

Explanation

Sound method gathers independent evidence and tests the claim against it rather than accepting assertions or presupposing wrongdoing. Comparison of documented activity with the asserted limitations is the core of a defensible finding.

Question 7Investigative Principles and Practices

When serving legal process in Missouri, the investigator's authority derives from:

  1. The appointing court or the statutes governing service of process Correct answer.
  2. The private investigator license alone
  3. The client's written instruction
  4. The investigator's general authority to investigate

Explanation

Service of process is governed by court rules and statutes that specify who may serve and how. A private investigator license does not itself confer process-serving authority, and a client cannot create it by instruction.

Question 8Investigative Principles and Practices

In a chain-of-custody record for physical evidence, each transfer entry should include:

  1. A description of the item's evidentiary significance
  2. The date, time, transferring and receiving parties, and purpose of each transfer Correct answer.
  3. Only the date of transfer
  4. The name of the original owner only

Explanation

A chain of custody must show an unbroken, documented sequence of possession. Each link records who transferred the item, to whom, when, and why, so that later challenges can be answered.

Question 9Investigative Principles and Practices

A missing person's family reports that the subject left a note suggesting self-harm. Which step should the investigator prioritize first?

  1. Interview the family for several hours before any notification
  2. Post the note on social media for public assistance
  3. Begin a door-to-door canvas of the neighborhood
  4. Notify the appropriate law enforcement agency and preserve the note in place Correct answer.

Explanation

Where there is an indication of danger to life, immediate notification of law enforcement takes priority, and the note must be preserved as potential evidence. Other investigative steps can proceed afterward without compromising the item.

Question 10Investigative Principles and Practices

An investigator interviews two employees who give conflicting accounts of the same event. What is the most defensible next step?

  1. Average the two accounts into a single narrative
  2. Discard both accounts as unreliable
  3. Document each account separately and seek independent corroborating evidence Correct answer.
  4. Adopt the account given by the more senior employee

Explanation

Conflicting statements are resolved by preserving each version and testing them against independent evidence. Selecting by seniority, blending accounts, or discarding both replaces analysis with guesswork.

Question 11Investigative Principles and Practices

Which practice best protects the integrity of digital evidence collected from a subject's device with proper authority?

  1. Working directly on the original device to save time
  2. Creating a forensic image and working from the copy while documenting the hash value Correct answer.
  3. Relying on screenshots taken by the client
  4. Deleting irrelevant files before analysis

Explanation

Forensic imaging preserves the original while allowing analysis on a verified copy, and hash values demonstrate that the copy matches the source. Altering the original or relying on unverified screenshots undermines authenticity.

Question 12Investigative Principles and Practices

A client asks an investigator to obtain a subject's phone records by posing as the account holder. The investigator should:

  1. Proceed, since the client authorized the request
  2. Proceed if the investigator records the call
  3. Delegate the call to an unlicensed assistant
  4. Decline, because pretexting for financial or phone records is prohibited by federal law Correct answer.

Explanation

Federal law prohibits obtaining customer information from financial institutions and telephone carriers by false pretenses. Client authorization does not override that prohibition, and recording or delegating the call does not cure it.

Question 13Investigative Principles and Practices

In preparing a trial-ready investigative file, the investigator should organize materials so that:

  1. Witness identities are withheld from the retaining attorney
  2. Only favorable material is retained
  3. Drafts are destroyed after the final report
  4. Every item can be traced to its source, date, and custodian Correct answer.

Explanation

A trial-ready file is one in which each item's provenance is documented, allowing the attorney to assess and disclose as required. Selective retention, destruction of drafts, and withholding identities impair the attorney's ability to represent the client.

Question 14Investigative Principles and Practices

An investigator conducting a background check on a job applicant must be mindful that the federal Fair Credit Reporting Act primarily regulates:

  1. Surveillance of employees in the workplace
  2. Criminal history checks performed by law enforcement
  3. The investigator's license renewal
  4. Consumer reports prepared by consumer reporting agencies and the notices required before and after adverse action Correct answer.

Explanation

The FCRA governs consumer reports, including background reports prepared by consumer reporting agencies, and imposes disclosure and adverse-action notice requirements. It does not regulate police records work, workplace surveillance, or licensure.

Question 15Investigative Principles and Practices

A surveillance subject repeatedly checks for followers. Which technique best reduces the chance of detection?

  1. Using a single vehicle throughout the operation
  2. Maintaining a fixed position directly behind the subject
  3. Using staggered, rotating surveillance units with intermittent observation Correct answer.
  4. Following at a constant close distance

Explanation

Rotating units and intermittent observation reduce the pattern a subject can detect. Fixed positions, a single vehicle, and constant close following all create recognizable signatures.

Question 16Investigative Principles and Practices

When drafting an affidavit of probable cause for a client's attorney, the investigator should ensure that the affidavit:

  1. Relies on hearsay without attribution
  2. Omits the investigator's basis of knowledge
  3. States the investigator's training and experience and the specific facts supporting each conclusion Correct answer.
  4. Contains conclusions without supporting facts

Explanation

An affidavit must set out the affiant's basis of knowledge and the specific facts that support each conclusion, so a reviewing court can assess reliability. Bare conclusions and unattributed hearsay are insufficient.

Question 17Investigative Principles and Practices

An investigator is asked to interview a child about an alleged incident. Which approach is generally preferred?

  1. Repeated questioning until the child gives a consistent account
  2. A confrontational interview with the accused present
  3. A structured, non-leading interview conducted in a neutral setting by a trained interviewer Correct answer.
  4. Leading questions to confirm the investigator's theory

Explanation

Child interviews are conducted with open, non-leading prompts in a neutral setting by someone trained in the method, to preserve accuracy and avoid suggestibility. Repeated or leading questioning and confrontation increase error and distress.

Question 18Investigative Principles and Practices

A client requests daily status updates on an ongoing surveillance. The investigator's best response is to:

  1. Provide updates that accurately reflect what has been observed, without embellishment Correct answer.
  2. Exaggerate results to justify the fee
  3. Refuse all communication until the case closes
  4. Report unverified assumptions as facts

Explanation

Ethical practice requires accurate reporting of what has actually been observed, leaving interpretation to be clearly labeled. Inflating results or misreporting assumptions violates the duty of candor to the client.

Question 19Investigative Principles and Practices

In a missing-person investigation involving a possible abduction, the investigator should coordinate with law enforcement because:

  1. Private investigators have primary jurisdiction over abduction cases
  2. The investigator must transfer the client relationship
  3. Coordination is required only after the case is solved
  4. Law enforcement has resources and legal authority the investigator lacks, and coordination avoids compromising the case Correct answer.

Explanation

Law enforcement possesses authority and resources, such as warrants and forensic services, that private investigators do not. Early coordination preserves evidence and avoids conflicting investigative actions.

Question 20Investigative Principles and Practices

An investigator obtains a subject's location through a GPS device secretly attached to the subject's vehicle without consent or a warrant. In Missouri, this conduct is best characterized as:

  1. Permissible if the vehicle is in a public place
  2. Permissible because the investigator is licensed
  3. Legally risky, because unauthorized GPS tracking can expose the investigator to civil and criminal liability Correct answer.
  4. Permissible if the client is a spouse in a divorce case

Explanation

Unauthorized placement of a tracking device can constitute a trespass and may violate statutes and privacy rights, exposing the investigator to civil and criminal liability. Licensure, public location, or the client's relationship status does not create authority to track without consent or legal process.

Question 21Investigative Principles and Practices

An investigator writes a report stating, 'The subject appeared nervous and therefore was likely lying.' The principal weakness of this statement is that it:

  1. Fails to identify the subject's address
  2. Draws a conclusion about veracity from demeanor without supporting behavioral evidence Correct answer.
  3. Should have been written in the passive voice
  4. Uses too many words

Explanation

Demeanor is a weak indicator of truthfulness, and a report should describe observable behavior rather than assert a conclusion about lying. The problem is the unsupported inference, not style or identifying detail.

Question 22Investigative Principles and Practices

Which practice best supports an investigator's testimony when challenged on the accuracy of field notes?

  1. Keeping original notes and any later additions clearly dated and identified as such Correct answer.
  2. Discarding original notes once a formal report is typed
  3. Relying on a colleague's recollection of the notes
  4. Rewriting notes after review to improve clarity

Explanation

Original notes should be preserved, and later additions or corrections should be dated and identified so the record reflects what was recorded and when. Rewriting, discarding originals, or relying on another's memory invites impeachment.

Question 23Investigative Principles and Practices

An investigator is asked to determine whether a business has been a victim of internal theft. Which investigative sequence is most sound?

  1. Confront the most likely suspect immediately
  2. Review records and access data to identify anomalies, then conduct targeted interviews Correct answer.
  3. Interview all employees first, then review records
  4. Announce a general investigation to deter theft

Explanation

Documentary and access-data review narrows the field and provides a factual basis for targeted interviews. Broad early interviews or premature confrontation alert subjects and can compromise the investigation.

Question 24Investigative Principles and Practices

A retaining attorney asks the investigator to destroy draft notes that contain an unfavorable witness statement. The investigator should:

  1. Alter the notes to omit the statement
  2. Destroy the notes but keep a private copy
  3. Refuse, because destroying potentially discoverable material may constitute spoliation and violates professional obligations Correct answer.
  4. Destroy the notes as directed because the attorney is the client

Explanation

Destroying material relevant to litigation risks spoliation sanctions and conflicts with the investigator's professional duties. A private copy or alteration does not cure the problem and may compound it.

Question 25Investigative Principles and Practices

An investigator's report will be used in a proceeding where the opposing party may challenge the investigator's qualifications. The strongest foundation is established by:

  1. Avoiding any statement of methodology
  2. Documenting specific training, experience, and the methodology used in this investigation Correct answer.
  3. Relying on the client's endorsement
  4. Claiming broad expertise in all investigative fields

Explanation

Qualification is established through specific, documented training and experience and a methodology that can be explained and defended. Overbroad claims, client endorsement, and unexplained methods weaken the foundation.

Question 26Investigative Principles and Practices

A Missouri private investigator is hired to locate a debtor who has moved without leaving a forwarding address. Which source of information is generally the most productive first step for establishing a current address?

  1. A pretext call to the debtor's family posing as a police officer
  2. The debtor's bank account statements obtained without consent
  3. Public records such as property, court, and utility-related filings Correct answer.
  4. The debtor's former employer's internal personnel file

Explanation

Lawful public-record sources are the standard starting point in a skip-trace because they are accessible without deception or unauthorized access and often reveal a current address. Obtaining financial records or impersonating law enforcement would be unlawful or unethical and could taint the investigation.

Question 27Investigative Principles and Practices

During a residential surveillance, the investigator notices the subject has begun scanning the street each time before leaving. Which adjustment best preserves coverage while reducing the risk of compromise?

  1. Follow more closely so the subject cannot escape the area
  2. Move to a position with a different sightline and vary the observation pattern Correct answer.
  3. Confront the subject and explain the purpose of the surveillance
  4. Abandon the surveillance permanently once the subject looks around

Explanation

Counter-surveillance behavior signals the subject is alert to being watched, so changing position and varying timing reduces recognizable patterns. Closing distance increases the chance of being spotted and does not improve long-term coverage.

Question 28Investigative Principles and Practices

An investigator is documenting a scene where a window was forced open. Which practice best preserves the evidentiary value of the tool marks on the frame?

  1. Photograph the marks in place with scale references before any handling Correct answer.
  2. Record only a written description and skip photography
  3. Pry the frame further to determine how much force was used
  4. Wipe the frame clean so the marks are easier to see

Explanation

Documenting tool marks in place with scale references preserves their dimensions and context before anything is disturbed. Altering or further damaging the frame destroys comparison value and may be characterized as spoliation.

Question 29Investigative Principles and Practices

An investigator is retained to determine whether an employee has been selling company inventory on the side. Which sequence of steps best reflects a sound investigative plan?

  1. Rely solely on an anonymous tip and close the case
  2. Confront the suspect publicly, then collect supporting documents
  3. Define the allegation, gather records and physical evidence, then interview witnesses and finally the subject Correct answer.
  4. Interview the subject first, then decide what records to request

Explanation

A defensible internal-theft investigation moves from framing the allegation to documentary and physical evidence before interviews, so accounts can be tested against facts. Interviewing the subject first allows explanations to be tailored and evidence to be destroyed.

Question 30Investigative Principles and Practices

An investigator is preparing to interview a witness who may be reluctant to speak. Which opening approach is generally most effective for building cooperation?

  1. Demand a signed statement before any conversation
  2. Immediately accuse the witness of complicity in the matter
  3. Read the witness a list of legal penalties for obstruction
  4. Begin with neutral, non-threatening questions about the witness's role and observations Correct answer.

Explanation

Neutral opening questions reduce defensiveness and establish rapport, which improves the quality and completeness of the account. Accusatory or threatening openings tend to shut down cooperation and may raise legal concerns.

Question 31Investigative Principles and Practices

An investigator obtains a witness's account, then later learns the witness may have a motive to favor one party. What is the most appropriate handling of this information in the case file?

  1. Omit the bias because it might weaken the client's position
  2. Record the potential bias and its basis so the account can be weighed accordingly Correct answer.
  3. Report the bias only verbally and keep no record
  4. Delete the witness statement entirely

Explanation

Documenting potential bias and its factual basis allows the account to be evaluated fairly and protects the investigator's credibility. Suppressing or destroying the information undermines the integrity of the file and could constitute spoliation.

Question 32Investigative Principles and Practices

An investigator is asked to determine the registered owner of a vehicle observed at a scene. Which step is the appropriate lawful method for obtaining that information?

  1. Pay a third party to obtain it without asking how
  2. Ask a contact at the licensing agency to look it up informally
  3. Request the record through the legally permitted channel available to the investigator or the retaining attorney Correct answer.
  4. Access the record through a pretext account created for the purpose

Explanation

Vehicle registration data is protected, so it must be obtained through lawful channels such as authorized requests or legal process. Informal access, pretexting, or unverified third parties can violate privacy laws and taint the evidence.

Question 33Investigative Principles and Practices

An investigator is compiling a report of a workplace incident. Which element is essential for the report to be useful to the retaining attorney?

  1. A clear separation of observed facts from the investigator's opinions or inferences Correct answer.
  2. A persuasive argument for the client's desired outcome
  3. Omission of any facts unfavorable to the client
  4. Speculation about the parties' motives presented as fact

Explanation

Reports must distinguish verified facts from inference so the reader can assess reliability and the attorney can use the material effectively. Advocacy, speculation, or selective omission undermines objectivity and credibility.

Question 34Investigative Principles and Practices

An investigator is conducting an interview in a room where the witness appears anxious and keeps checking the door. Which action best supports a productive interview?

  1. Tell the witness the interview will continue until a confession is obtained
  2. Raise your voice to assert control of the room
  3. Block the exit so the witness cannot leave
  4. Acknowledge the discomfort, explain the process, and offer a neutral setting Correct answer.

Explanation

Reducing anxiety and explaining the process encourages candor and recall. Physically blocking exit or making threats is coercive, may render statements unreliable, and can create legal exposure.

Question 35Investigative Principles and Practices

An investigator is reviewing a subject's social-media posts as part of a lawful inquiry. Which practice best preserves the evident value of those posts?

  1. Ask a friend to describe the posts
  2. Take a single low-resolution photo of a screen
  3. Capture the post with its URL, date, time, and a screenshot archived with a hash or metadata record Correct answer.
  4. Rely on memory of what the posts said

Explanation

Preserving the URL, timestamps, and an authenticated capture allows the material to be verified later and withstands challenges to its authenticity. Relying on memory or informal descriptions provides no verifiable record.

Question 36Investigative Principles and Practices

An investigator is asked to review a company's vendor payments for signs of fraud. Which analytical approach is most likely to surface anomalies efficiently?

  1. Review only the largest single payment
  2. Assume the accounting staff is honest and skip verification
  3. Select payments at random without any criteria
  4. Compare payment patterns against vendor records and look for duplicates, round amounts, or unusual timing Correct answer.

Explanation

Fraud analytics work best when payments are tested against expected vendor patterns for indicators such as duplicate invoices, round figures, or off-cycle timing. A single-payment review or random selection without criteria is unlikely to detect a scheme.

Question 37Investigative Principles and Practices

An investigator is asked to testify about observations made during surveillance. Which preparation best supports credible testimony?

  1. Adopt whatever version the retaining attorney prefers
  2. Review contemporaneous field notes and reports before testifying and testify only to what was observed Correct answer.
  3. Testify to conclusions the investigator did not personally verify
  4. Reconstruct events from memory on the stand without reviewing notes

Explanation

Refreshing recollection from contemporaneous notes and limiting testimony to personal observation keeps the account accurate and defensible under cross-examination. Reconstructing from memory or adopting a preferred version invites impeachment.

Question 38Investigative Principles and Practices

An investigator is retained to locate a missing adult who has no apparent signs of foul play. Which initial step is most appropriate?

  1. Interview the reporting party to establish a timeline, habits, and last known contacts Correct answer.
  2. Assume the person does not wish to be found and close the file
  3. Access the person's financial accounts to trace movements
  4. Immediately publicize the person's photograph nationwide

Explanation

For a missing adult without signs of danger, building a timeline and profile of habits and contacts directs the search efficiently. Premature nationwide publicity or unauthorized account access is disproportionate or unlawful.

Question 39Investigative Principles and Practices

An investigator is asked to serve a subpoena on a witness in Missouri. Which consideration is most relevant to the lawful completion of service?

  1. Serving the document in any manner the investigator finds convenient
  2. Leaving the document at a random address and noting it as served
  3. Telling the witness the document is optional
  4. Following the service requirements set by the court and applicable rules for the type of process Correct answer.

Explanation

Valid service depends on complying with the issuing court's rules on who may serve, how, and on whom. Improper methods can invalidate service and waste the client's resources.

Question 40Investigative Principles and Practices

An investigator is planning a pretext interview with a witness who may hold key information. Which principle governs the use of pretext in a professional investigation?

  1. Pretext must not involve impersonating law enforcement or obtaining protected records by deception Correct answer.
  2. Any pretext is acceptable as long as the information is useful
  3. Pretext is permitted only if the client approves in writing
  4. Pretext may include threats if the witness is uncooperative

Explanation

Pretext has limits: impersonating law enforcement or using deception to obtain legally protected records crosses into unlawful conduct. Client approval cannot authorize illegal acts, and threats are never permissible.

Question 41Investigative Principles and Practices

An investigator receives an anonymous package containing documents that appear to be stolen from the subject's employer. What is the most appropriate response?

  1. Publish the documents online to pressure the subject
  2. Destroy the package so the investigator is not involved
  3. Preserve the package as received and consult the retaining attorney about lawful handling Correct answer.
  4. Use the documents freely without documenting their origin

Explanation

The origin of the material matters legally, so the investigator should preserve it as received and seek the attorney's guidance before using it. Destroying it or using it without documenting provenance risks spoliation and legal exposure.

Question 42Investigative Principles and Practices

An investigator is asked to verify whether a subject actually resides at a stated address. Which combination of methods best supports a reliable conclusion?

  1. Accept the subject's own statement without verification
  2. Rely on a single drive-by observation at midday
  3. Ask a neighbor once and treat the answer as conclusive
  4. Corroborate observations, public records, and utility or mail indicators over a period of time Correct answer.

Explanation

Residence is best established by corroborating multiple independent indicators observed over time, which reduces the chance of error. A single observation or one neighbor's comment is too thin to support a reliable conclusion.

Question 43Investigative Principles and Practices

An investigator is asked to assess whether a claimant's reported back injury is consistent with observed activity. Which approach best balances effectiveness with ethical conduct?

  1. Conduct lawful surveillance and document observed activity objectively without harassment Correct answer.
  2. Obtain the claimant's medical records through a pretext call
  3. Confront the claimant at home and demand an explanation
  4. Encourage the claimant to perform strenuous tasks to test the injury

Explanation

Objective, lawful surveillance that documents observed activity is the accepted method for testing an injury claim. Confrontation, induced activity, or pretexting for medical records is unethical or unlawful and could undermine the case.

Question 44Investigative Principles and Practices

An investigator is coordinating with law enforcement on a matter that may involve criminal conduct. Which practice best serves the client's interests?

  1. Withhold all information from law enforcement regardless of the circumstances
  2. Promise law enforcement that the client will not be prosecuted
  3. Conduct the criminal investigation independently of any coordination
  4. Share factual findings through proper channels while preserving the investigator's independent records Correct answer.

Explanation

Coordinating through proper channels while maintaining independent records preserves both the client's position and the integrity of the evidence. Withholding relevant information or making promises about prosecution exceeds the investigator's role.

Question 45Investigative Principles and Practices

An investigator is reviewing a witness's prior statement that conflicts with the witness's current account. Which technique is most appropriate for resolving the discrepancy in a follow-up interview?

  1. Ignore the earlier statement to avoid embarrassment
  2. Accuse the witness of lying and demand an immediate admission
  3. Tell the witness which version the client prefers
  4. Present the prior statement factually and ask the witness to explain the difference Correct answer.

Explanation

Presenting the prior statement neutrally invites an explanation and preserves cooperation while testing credibility. Accusation or steering the witness toward a preferred version undermines reliability and ethics.

Question 46Investigative Principles and Practices

An investigator is asked to determine whether a person has a valid professional license. Which source is most authoritative for that determination?

  1. A social-media profile listing the credential
  2. The person's own business card
  3. The official licensing board's public verification system Correct answer.
  4. A colleague's recollection of the license

Explanation

The licensing board's official verification is the authoritative record of whether a credential is valid and current. Secondary indicators such as profiles, cards, or recollections are not reliable proof.

Question 47Investigative Principles and Practices

An investigator is preparing a surveillance log for possible use at trial. Which entry format best supports later testimony?

  1. Notes that record only conclusions such as 'subject acted guilty'
  2. A summary written from memory at the end of the week
  3. Chronological entries with date, time, location, and objective description of each observation Correct answer.
  4. Entries that omit times because they are hard to remember

Explanation

Contemporaneous, chronological entries with times and objective descriptions allow the investigator to testify accurately and withstand challenges. Summaries from memory or conclusory notes are far weaker.

Question 48Investigative Principles and Practices

An investigator is asked to examine a computer that may contain evidence of employee misconduct. Which practice best preserves the integrity of the data?

  1. Let the client's IT staff modify the drive as needed
  2. Create a forensic image before analysis and work from the copy Correct answer.
  3. Delete irrelevant files to reduce clutter
  4. Open files directly on the original drive to save time

Explanation

Imaging the drive first preserves the original state and allows analysis on a working copy, which is essential for authenticity. Working directly on the original or altering it risks destroying evidence and undermining admissibility.

Question 49Investigative Principles and Practices

An investigator is asked to evaluate the reliability of an informant's tip before acting on it. Which factor is most relevant to that assessment?

  1. Whether the informant asked to remain anonymous
  2. Whether the tip's details can be independently corroborated Correct answer.
  3. Whether the informant seemed sincere in tone
  4. Whether the tip supports the client's theory

Explanation

Reliability is judged by whether the information can be independently corroborated, not by demeanor or convenience. A tip that aligns with a desired outcome still requires verification.

Question 50Investigative Principles and Practices

An investigator is asked to document a witness's identification of a suspect from a set of photographs. Which practice best protects the reliability of the identification?

  1. Show a single photograph of the suspect and ask for confirmation
  2. Show the photographs to the witness multiple times until a choice is made
  3. Suggest which photograph the witness should choose
  4. Use a fair lineup procedure and record the witness's confidence and exact words at the time Correct answer.

Explanation

A fair procedure that avoids suggestion and records the witness's own words and confidence preserves the identification's evidentiary value. Single-photo showups, suggestion, or repeated showings increase error and undermine reliability.