I85PREP
⌘ K
NCIS Special Agent study materials
NCIS Special Agent study resources

NCIS Special Agent practice questions

One question at a time. Build your NCIS Special Agent understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Criminal Investigation and Case Management

A federal special agent is assigned a lead on an alleged kidnapping that occurred within the special maritime and territorial jurisdiction of the United States. Which statutory source gives the FBI primary investigative authority over that offense?

  1. 28 U.S.C. § 533, which authorizes the Attorney General to direct FBI investigations Correct answer.
  2. 28 C.F.R. § 0.85, which lists FBI investigative jurisdiction
  3. 18 U.S.C. § 3052, which enumerates the FBI's arrest powers
  4. 18 U.S.C. § 1201, which assigns kidnapping investigations to the FBI

Explanation

28 U.S.C. § 533 authorizes the Attorney General to appoint officials to detect and prosecute crimes against the United States, and the Attorney General has delegated that investigative authority to the FBI. Offense-specific statutes such as § 1201 define the crime but do not themselves confer the investigative assignment. The regulatory and arrest-power provisions describe or implement authority rather than grant the underlying investigative mandate.

Question 2Criminal Investigation and Case Management

During a preliminary investigation, an agent must decide whether a matter falls within FBI jurisdiction. Which document most directly defines the categories of criminal activity the FBI is authorized to investigate?

  1. The U.S. Attorney's Manual
  2. The Federal Rules of Criminal Procedure
  3. The Code of Federal Regulations, Title 28, Chapter I
  4. The general investigative jurisdiction regulations and statutory assignments of the FBI Correct answer.

Explanation

The FBI's investigative authority flows from statutory assignments and the Department of Justice regulations that implement them, which define the categories of violations the Bureau investigates. The Federal Rules govern procedure in federal court rather than agency jurisdiction. The U.S. Attorney's Manual provides internal guidance but is not the source of investigative authority.

Question 3Criminal Investigation and Case Management

An agent receives an anonymous tip alleging a federal crime. Before opening a full investigation, the agent wants to corroborate the tip through limited activity that does not require a reasonable indication of criminal conduct. Which standard best describes this preliminary phase?

  1. A full investigation, which requires probable cause to believe a crime occurred
  2. A consensual monitoring operation, which requires prior Attorney General approval
  3. A grand jury investigation, which requires a subpoena first
  4. A preliminary investigation, which may be initiated on allegations or information of a federal crime Correct answer.

Explanation

FBI investigative guidelines allow a preliminary investigation to begin when there is an allegation or information that a federal crime has been or may be committed, and the activity permitted at that stage is limited. A full investigation requires a reasonable indication of a federal crime and permits broader techniques. Probable cause is the standard for many specific intrusive techniques, not the threshold for a full investigation itself.

Question 4Criminal Investigation and Case Management

Which statement correctly describes the difference between an assessment and a preliminary investigation under FBI investigative guidelines?

  1. Assessments and preliminary investigations are identical in scope and authorized techniques
  2. A preliminary investigation may only be opened after a grand jury subpoena is issued
  3. An assessment allows limited, non-intrusive information gathering to determine whether a predicate exists Correct answer.
  4. An assessment permits the same intrusive techniques as a full investigation

Explanation

An assessment is the least intrusive authorized activity and permits limited information gathering, such as checking public records and conducting interviews, to determine whether a predicate for further investigation exists. A preliminary investigation requires an allegation or information of a federal crime and authorizes additional techniques. The two stages differ in scope and in the techniques they permit.

Question 5Criminal Investigation and Case Management

An agent is preparing a case file that will be forwarded to the U.S. Attorney's office for prosecution. Which document typically summarizes the evidence, identifies the offense, and recommends charges?

  1. A Miranda waiver form
  2. An evidence inventory sheet
  3. A prosecution report or case summary memorandum Correct answer.
  4. A chain-of-custody log

Explanation

A prosecution report or case summary memorandum presents the facts, identifies the statutes violated, and recommends charges to the prosecuting authority. Chain-of-custody logs and evidence inventories document the handling of physical items only. A Miranda waiver records a subject's acknowledgment of rights rather than the theory of the case.

Question 6Criminal Investigation and Case Management

Which practice best preserves the integrity of physical evidence from the moment it is seized until it is presented in court?

  1. Allowing any agent with case knowledge to sign items in and out informally
  2. Photographing the evidence once and relying on the photograph thereafter
  3. Storing evidence in an agent's desk until trial preparation begins
  4. Recording each transfer of custody with date, time, and the identity of the person taking custody Correct answer.

Explanation

The chain of custody must document every transfer of an item, including the date, time, and identity of each custodian, so a court can find that the item is what it purports to be and has not been altered. Informal handling or unsupervised storage creates gaps that undermine admissibility. A single photograph does not substitute for custody records.

Question 7Criminal Investigation and Case Management

An agent interviews a suspect who is in custody and wants to invoke the right to remain silent. What is the correct course of action?

  1. Stop the interrogation and honor the invocation Correct answer.
  2. Repeat the warnings and continue questioning immediately
  3. Ask the suspect to sign a waiver before stopping
  4. Continue questioning but only about non-custodial matters

Explanation

Once a suspect in custody unambiguously invokes the right to remain silent, questioning must cease, and any waiver must be knowing, voluntary, and intelligent. Continuing to press the suspect after invocation risks suppression of statements. Re-warning and immediately resuming questioning does not cure an honored invocation.

Question 8Criminal Investigation and Case Management

During a non-custodial interview, a subject makes an incriminating statement. Which factor most affects whether Miranda warnings were required?

  1. Whether the subject had prior contact with law enforcement
  2. Whether the subject was free to leave and whether questioning was likely to elicit an incriminating response Correct answer.
  3. Whether the interview was recorded
  4. Whether the agent identified himself as a federal officer

Explanation

Miranda applies to custodial interrogation, so the key questions are whether a reasonable person would feel free to leave and whether the agent's questions were reasonably likely to elicit an incriminating response. Identification, recording, and prior contacts are relevant to voluntariness but do not by themselves trigger the warning requirement.

Question 9Criminal Investigation and Case Management

An agent wants to search a suspect's residence for evidence of a federal offense. The suspect does not consent, and no exigency exists. What is the most appropriate basis for the search?

  1. A written request from the U.S. Attorney
  2. An administrative inspection order
  3. A subpoena duces tecum
  4. A search warrant supported by probable cause Correct answer.

Explanation

A search of a residence for evidence generally requires a warrant supported by probable cause, absent a recognized exception such as consent or exigency. A subpoena compels production of documents but does not authorize entry and search of a home. Administrative inspection orders and prosecutorial requests do not substitute for a judicial warrant.

Question 10Criminal Investigation and Case Management

An agent conducts a warrantless search of a vehicle after a lawful traffic stop and develops probable cause that contraband is inside. Which doctrine most directly supports the search?

  1. The inevitable discovery doctrine
  2. The automobile exception Correct answer.
  3. The plain view doctrine
  4. The stop-and-frisk doctrine

Explanation

The automobile exception permits a warrantless search of a vehicle when there is probable cause to believe it contains contraband or evidence, given the reduced expectation of privacy in vehicles and their mobility. Plain view requires lawful vantage point and immediately apparent incriminating character. Stop-and-frisk concerns weapons pat-downs, and inevitable discovery addresses attenuation of a prior illegality.

Question 11Criminal Investigation and Case Management

An agent obtains a warrant to search a suspect's home for a specified handgun. During the search, the agent finds a locked safe containing narcotics. Which statement best describes the lawful course of action?

  1. The agent may seize the narcotics only after obtaining a separate warrant, regardless of circumstances
  2. The agent must ignore the narcotics because they were not named in the warrant
  3. The agent may seize the narcotics only if their incriminating character is immediately apparent and the search stays within the warrant's scope Correct answer.
  4. The agent may seize the narcotics because any evidence found during a warrant search is admissible

Explanation

Under the plain view doctrine, officers lawfully present within the scope of a warrant may seize items whose incriminating character is immediately apparent. The narcotics may therefore be seized if the agent had lawful access to the safe's contents and the incriminating nature was apparent. Items outside the warrant's scope cannot be seized merely because they were found during the search.

Question 12Criminal Investigation and Case Management

An agent needs to compel a witness to produce business records relevant to a federal investigation. Which tool is most appropriate?

  1. A grand jury subpoena duces tecum Correct answer.
  2. An arrest warrant
  3. A search warrant
  4. A material witness warrant

Explanation

A grand jury subpoena duces tecum compels a person or entity to produce documents or records relevant to the investigation. A search warrant authorizes entry and seizure, while arrest and material witness warrants concern persons. The subpoena is the least intrusive tool suited to obtaining existing records.

Question 13Criminal Investigation and Case Management

Which statement best describes the role of a grand jury in a federal criminal investigation?

  1. It investigates potential crimes and may return an indictment Correct answer.
  2. It determines guilt or innocence at trial
  3. It reviews and approves search warrant applications
  4. It supervises the conduct of federal agents

Explanation

A federal grand jury investigates potential crimes, may subpoena witnesses and records, and can return an indictment if it finds probable cause. It does not determine guilt at trial; that is the petit jury's function. It does not approve search warrants or supervise agents.

Question 14Criminal Investigation and Case Management

An agent is developing a timeline of events in a fraud investigation. Which approach best supports later testimony and case review?

  1. Summarize events without citing underlying documents
  2. Maintain a contemporaneous chronological log with sources for each entry Correct answer.
  3. Record only dates that are confirmed by the suspect
  4. Rely on memory and reconstruct the timeline at trial

Explanation

A contemporaneous log that cites the source of each entry allows the agent to reconstruct events accurately and to support testimony with identifiable records. Reconstructing from memory invites error and impeachment. Omitting sources or relying only on suspect statements weakens the timeline's evidentiary value.

Question 15Criminal Investigation and Case Management

An agent receives information from a confidential informant. Which practice best protects the informant and the case?

  1. Recording the informant's statements only if they are exculpatory
  2. Documenting the informant's reliability and the information provided in a controlled manner Correct answer.
  3. Disclosing the informant's identity in the initial prosecution report
  4. Sharing the informant's identity with all case agents regardless of need

Explanation

Informant information should be documented with attention to reliability and handled through controlled procedures that limit unnecessary disclosure. Broad disclosure in reports or to all agents increases risk to the informant and can compromise the investigation. Reliability documentation also supports later probable cause determinations.

Question 16Criminal Investigation and Case Management

An agent is preparing an affidavit in support of a search warrant. Which element is essential to the affidavit's sufficiency?

  1. A promise that the evidence will be returned after examination
  2. Facts establishing probable cause that evidence of a crime will be found at the specified location Correct answer.
  3. A summary of the suspect's criminal history alone
  4. A statement of the agent's conclusions without supporting facts

Explanation

A warrant affidavit must set forth facts that allow a neutral magistrate to find probable cause that evidence of a crime will be found at the place to be searched. Bare conclusions are insufficient, and criminal history alone does not establish that evidence is presently at a location. The affidavit must connect the facts to the specific place.

Question 17Criminal Investigation and Case Management

An agent discovers potentially exculpatory evidence during an investigation. What is the agent's obligation?

  1. Disclose it only after trial begins
  2. Destroy the evidence if it is not relevant to the agent's theory
  3. Withhold the evidence unless the defense requests it
  4. Disclose the evidence to the prosecution so it can be provided to the defense Correct answer.

Explanation

Under Brady and related obligations, the prosecution must disclose material exculpatory evidence to the defense, and agents support that duty by promptly reporting such evidence to prosecutors. Withholding, destroying, or delaying disclosure can violate due process and ethical rules. The obligation does not depend on a defense request.

Question 18Criminal Investigation and Case Management

Which action best describes the proper handling of digital evidence seized from a suspect's phone?

  1. Turning the phone on immediately to check messages
  2. Preserving the device in a state that prevents alteration and documenting the seizure Correct answer.
  3. Returning the phone after photographing the screen
  4. Allowing the suspect to delete non-relevant files

Explanation

Digital evidence should be preserved to prevent alteration, often by isolating the device from networks and documenting its condition at seizure. Turning on the device or allowing deletion can change metadata and destroy evidence. Returning the device before examination forfeits potential evidence.

Question 19Criminal Investigation and Case Management

An agent is assigned to a task force investigating a multi-district crime. Which coordination step best supports case management?

  1. Deferring all decisions to the lead prosecutor
  2. Working independently to avoid disclosure conflicts
  3. Establishing a deconfliction process to identify overlapping investigations Correct answer.
  4. Sharing all case files with every task force member

Explanation

Deconfliction identifies overlapping investigations and targets so that agencies avoid duplicating efforts or compromising one another's operations. Independent action risks conflicts, while unrestricted file sharing and wholesale deference to a prosecutor do not substitute for coordinated case management. Deconfliction is a recognized best practice in multi-agency investigations.

Question 20Criminal Investigation and Case Management

An agent wants to use a wiretap to intercept communications in a federal drug investigation. Which requirement applies?

  1. Approval by the case agent's supervisor alone
  2. A subpoena to the telephone carrier
  3. A court order based on a detailed application showing necessity and probable cause Correct answer.
  4. Notification of the target before interception begins

Explanation

Title III requires a court order supported by a detailed application showing probable cause and necessity, and it imposes strict procedural safeguards. Supervisory approval and subpoenas do not authorize interception. Notice to the target is not required before interception and would defeat the purpose.

Question 21Criminal Investigation and Case Management

An agent is preparing to testify about a report he wrote months earlier. Which practice best supports accurate testimony?

  1. Reading the report verbatim to the jury without authentication
  2. Relying on another agent's summary of the report
  3. Testifying only from memory and refusing to review the report
  4. Reviewing the report before testimony to refresh recollection and testifying to the underlying facts Correct answer.

Explanation

An agent may review his own report to refresh recollection and should testify to the underlying facts rather than simply reading a document. Reading a report verbatim generally requires a hearsay exception or past-recollection-recorded foundation. Relying on another agent's summary risks inaccuracy and hearsay problems.

Question 22Criminal Investigation and Case Management

An agent is evaluating the credibility of a witness who has provided inconsistent statements. Which approach is most appropriate?

  1. Confront the witness aggressively without recording the interview
  2. Discard all statements because the witness is unreliable
  3. Document the inconsistencies and seek corroboration from independent sources Correct answer.
  4. Assume the most recent statement is true

Explanation

Inconsistent statements should be documented and evaluated against independent corroboration so the agent can assess reliability and preserve the record for prosecution. Discarding all statements or assuming recency equals truth ignores other evidence. Aggressive, unrecorded confrontation risks losing valuable information and creates documentation gaps.

Question 23Criminal Investigation and Case Management

An agent is conducting a consensual interview with a cooperative witness. Which technique best supports accurate fact-finding?

  1. Interrupting frequently to challenge inconsistencies
  2. Using open-ended questions first and following up with specific questions Correct answer.
  3. Sharing investigative conclusions to guide the witness
  4. Asking leading questions that suggest the desired answer

Explanation

Open-ended questions allow the witness to provide a full account in his own words, and specific follow-up questions then clarify details without contaminating memory. Leading questions and interruptions can distort recall and reduce reliability. Sharing conclusions risks suggestion and bias.

Question 24Criminal Investigation and Case Management

An agent is considering whether to use a pretext telephone call to a suspect. Which consideration is most important for case management?

  1. Whether the agent's supervisor personally listens live
  2. Whether the suspect will likely confess immediately
  3. Whether the call can be completed within one hour
  4. Whether the call is recorded and whether it complies with applicable law and policy Correct answer.

Explanation

Pretext communications must comply with applicable law and agency policy, and recording raises consent and authorization questions that must be resolved in advance. The likelihood of confession, call duration, and live monitoring are operational details rather than the controlling legal consideration.

Question 25Criminal Investigation and Case Management

An agent must decide whether to seek a material witness warrant for a person who has refused to appear before the grand jury. Which standard is most relevant?

  1. Whether the witness is likely to flee or is otherwise unavailable to testify Correct answer.
  2. Whether the witness has retained counsel
  3. Whether the witness lives outside the district
  4. Whether the witness has a prior criminal record

Explanation

A material witness warrant may be sought when a person's testimony is material and the person is unlikely to appear or is otherwise unavailable. Counsel, criminal history, and residence location are not the controlling criteria. The focus is on the necessity and reliability of the witness's appearance.

Question 26Criminal Investigation and Case Management

An agent is assigned to investigate a series of armed robberies across state lines. Which initial step best establishes the foundation for case management and later prosecution?

  1. Opening a formal case file and documenting the initial complaint and assigned investigative leads Correct answer.
  2. Requesting a grand jury subpoena for all financial records of the suspects
  3. Conducting a full background check on all witnesses before any interviews
  4. Drafting the final prosecution report based on preliminary assumptions

Explanation

A formal case file created at the outset ensures that all subsequent actions, evidence, and decisions are documented and traceable. This documentation supports coordination, review, and eventual prosecution. Premature or speculative steps can compromise the investigation or waste resources.

Question 27Criminal Investigation and Case Management

During an investigation, an agent learns that a key witness has a prior felony conviction for fraud. How should the agent handle this information in the case file?

  1. Document the conviction and assess its potential impact on the witness's credibility Correct answer.
  2. Confront the witness immediately and threaten to charge them if they lie
  3. Omit the conviction because it is irrelevant to the current investigation
  4. Disclose the conviction only if the witness testifies at trial

Explanation

Impeachment information such as prior convictions must be documented and evaluated for its effect on witness credibility. This supports later disclosure obligations and informed decisions about using the witness. Omitting or mishandling such information can undermine the case.

Question 28Criminal Investigation and Case Management

An agent is building a case against a suspect involved in a complex identity theft ring. Which case management practice best ensures that all evidence and investigative steps are accounted for?

  1. Delegating all documentation to a junior agent without review
  2. Relying on memory to recall key events during testimony
  3. Maintaining a centralized evidence log and an investigative activity timeline Correct answer.
  4. Storing evidence in multiple locations for redundancy

Explanation

A centralized evidence log and timeline provide a clear, auditable record of the investigation. This supports coordination, prevents loss of evidence, and aids in preparing for prosecution. Memory and unreviewed delegation introduce error and risk.

Question 29Criminal Investigation and Case Management

An agent is preparing to interview a suspect who has not been arrested. Which factor is most important in determining whether Miranda warnings are required?

  1. The suspect's willingness to cooperate
  2. The seriousness of the offense under investigation
  3. Whether the suspect is in custody or deprived of freedom in a significant way Correct answer.
  4. The suspect's prior criminal history

Explanation

Miranda warnings are required when a suspect is subjected to custodial interrogation, meaning they are deprived of freedom in a significant way. The other factors do not determine custody. The key is the objective circumstances of the interrogation.

Question 30Criminal Investigation and Case Management

An agent is investigating a large-scale drug trafficking organization and wants to use a wiretap. Which requirement must be met before a federal judge will authorize the interception?

  1. The agent must demonstrate that the wiretap will definitely lead to a conviction
  2. The agent must show that normal investigative procedures have been tried and failed or are unlikely to succeed Correct answer.
  3. The agent must obtain the consent of all parties whose communications will be intercepted
  4. The agent must first exhaust all other investigative techniques, including interviews with all suspects

Explanation

Federal wiretap authorization requires a showing that normal investigative procedures have been tried and failed or are unlikely to succeed, among other requirements. Consent of all parties is not required for a court-authorized wiretap. The other options set standards that are not part of the legal requirement.

Question 31Criminal Investigation and Case Management

An agent is preparing an affidavit for a search warrant. Which element is essential to establish probable cause?

  1. A statement that the agent believes the suspect is guilty
  2. A detailed description of the items to be seized and the place to be searched Correct answer.
  3. The names of all potential witnesses
  4. The suspect's full criminal history

Explanation

Probable cause requires a nexus between the evidence sought and the place to be searched, which is established by a detailed description of the items and location. The other elements are not essential and may be insufficient. The affidavit must provide specific facts, not mere beliefs.

Question 32Criminal Investigation and Case Management

An agent is handling a laptop seized from a suspect's home. Which practice best preserves the integrity of the digital evidence for trial?

  1. Browsing the files directly on the laptop to identify relevant evidence
  2. Storing the laptop in a hot car to prevent moisture damage
  3. Turning the laptop on and off to check for password protection
  4. Using forensic tools to create a bit-for-bit image of the hard drive and documenting the process Correct answer.

Explanation

Creating a forensic image preserves the original evidence and allows analysis without altering the source. Documenting the process maintains chain of custody. Direct browsing or improper storage can alter or damage evidence.

Question 33Criminal Investigation and Case Management

An agent is working with a confidential informant (CI) who has provided reliable information in the past. Which practice best protects the CI and the case?

  1. Allowing the CI to participate directly in arrests to ensure accuracy
  2. Revealing the CI's identity in the initial affidavit to establish probable cause
  3. Documenting the CI's information and maintaining the CI's confidentiality through proper handling procedures Correct answer.
  4. Sharing the CI's identity with all members of the task force without restriction

Explanation

Confidential informants must be protected through proper documentation and limited disclosure. Revealing identity unnecessarily can endanger the CI and compromise the investigation. The other options risk exposure and harm.

Question 34Criminal Investigation and Case Management

An agent discovers that a fellow agent may have violated department policy during an investigation. What is the agent's obligation?

  1. Report the potential violation through appropriate channels Correct answer.
  2. Confront the fellow agent privately and take no further action
  3. Document the violation in the case file but do not report it
  4. Ignore the violation to maintain team cohesion

Explanation

Agents have a duty to report potential misconduct through proper channels to ensure integrity and accountability. Private confrontation or ignoring the issue can lead to further problems. Documentation alone is insufficient.

Question 35Criminal Investigation and Case Management

An agent is preparing a case for prosecution and must decide which evidence to present to the grand jury. Which principle guides the selection?

  1. Only evidence that is favorable to the prosecution should be presented
  2. The agent should withhold evidence that might confuse the grand jury
  3. The agent should present all evidence that is relevant to the investigation, including potentially exculpatory evidence Correct answer.
  4. The agent should present only the evidence that supports the indictment

Explanation

While grand jury proceedings are not a trial, the agent's obligation is to present a complete and accurate picture, including evidence that may be exculpatory. Withholding relevant evidence can undermine the integrity of the process. The other options suggest improper selectivity.

Question 36Criminal Investigation and Case Management

An agent is conducting a consensual interview with a witness who is cooperating. Which technique best supports accurate fact-finding?

  1. Interrupting frequently to correct minor inconsistencies
  2. Asking leading questions to guide the witness to the desired answer
  3. Using open-ended questions and allowing the witness to provide a narrative Correct answer.
  4. Recording only the answers that support the investigation

Explanation

Open-ended questions and narrative responses help elicit complete and accurate information without contaminating the witness's memory. Leading questions and interruptions can distort recall. Selective recording is improper.

Question 37Criminal Investigation and Case Management

An agent is considering using a pretext telephone call to a suspect. Which consideration is most important for the agent to evaluate before proceeding?

  1. Whether the call is likely to yield incriminating statements without coercion Correct answer.
  2. Whether the suspect has a prior criminal record
  3. Whether the suspect has retained an attorney
  4. Whether the call would violate the suspect's Fourth Amendment rights

Explanation

Pretext calls are permissible if they do not involve coercion or violate other rights. The key is to ensure that the call is lawful and does not amount to improper inducement. Attorney representation and Fourth Amendment issues are relevant but not the primary consideration for a pretext call.

Question 38Criminal Investigation and Case Management

An agent is preparing to testify about a report written months earlier. Which practice best supports accurate testimony?

  1. Asking the judge to read the report aloud in court
  2. Relying on the prosecutor to summarize the report during direct examination
  3. Reviewing the report and associated notes before testifying Correct answer.
  4. Testifying from memory without reviewing any documents

Explanation

Reviewing reports and notes before testimony refreshes memory and ensures accuracy. Relying solely on memory or others is risky. The agent is responsible for knowing the case details.

Question 39Criminal Investigation and Case Management

An NCIS special agent is opening a case file on a theft of government property at a naval installation. Which entry best satisfies the standard for documenting the initial complaint in the case file?

  1. A summary written only after the investigation closes, consolidating all findings into one narrative
  2. A memo limited to the suspect's name and the penal statute number
  3. A note that the complaint was received, with details deferred to the prosecutor's file
  4. A chronological entry recording the date, source, and substance of the complaint, plus the agent's initial investigative steps Correct answer.

Explanation

Case documentation should be contemporaneous and complete: each entry records when information was received, from whom, what it consisted of, and what action followed. This creates an auditable chain that supports later affidavits, grand jury presentations, and testimony. Deferring detail or summarizing only at case closure undermines the record's reliability.

Question 40Criminal Investigation and Case Management

Midway through a fraud investigation, an agent learns that a records custodian at a naval contractor may have altered invoices after receiving a subpoena. What is the most appropriate case-management response?

  1. Document the suspected alteration and preserve the original records and related metadata before confronting anyone Correct answer.
  2. Wait until the grand jury convenes and raise the issue in the prosecutor's presentation
  3. Confront the custodian immediately and ask for a written statement admitting the alteration
  4. Return the records to the contractor so its compliance office can conduct an internal review

Explanation

Suspected destruction or alteration of evidence triggers an obligation to preserve originals and metadata and to document the circumstances, because the integrity of the evidence is now itself at issue. Preservation should precede interviews, since premature confrontation risks further loss. The prosecutor should be notified promptly rather than at the grand jury stage.

Question 41Federal Criminal Law and Procedure

An NCIS special agent is preparing an affidavit for a federal search warrant. Under the Fourth Amendment and the Federal Rules of Criminal Procedure, the warrant must be supported by which standard before a judge may issue it?

  1. Reasonable suspicion
  2. Mere suspicion
  3. Probable cause Correct answer.
  4. Preponderance of the evidence

Explanation

The Fourth Amendment requires that no warrant issue except upon probable cause, supported by oath or affirmation, and particularly describing the place to be searched and persons or things to be seized. Reasonable suspicion is a lower threshold used for brief investigative stops, while preponderance of the evidence is a civil burden of proof.

Question 42Federal Criminal Law and Procedure

During a lawful traffic stop on a naval base, an agent develops probable cause to believe the vehicle contains contraband. Under the automobile exception, the agent may do which of the following?

  1. Search the vehicle only if the driver consents in writing
  2. Search only the passenger compartment and never any containers
  3. Search the passenger compartment and containers within it without a warrant Correct answer.
  4. Search the vehicle only after obtaining a warrant in every circumstance

Explanation

When probable cause exists that a vehicle contains contraband, the automobile exception allows a warrantless search of the entire vehicle, including containers that could hold the object of the search. The exception rests on the vehicle's mobility and reduced expectation of privacy in vehicles.

Question 43Federal Criminal Law and Procedure

An agent questions a suspect who is in custody at an NCIS field office. Before custodial interrogation, what must the agent provide under Miranda v. Arizona?

  1. A judicial hearing to confirm the suspect's guilt
  2. A warning of the right to remain silent and the right to counsel, with a waiver obtained before questioning Correct answer.
  3. A written statement of charges before any questions are asked
  4. A warning only if the suspect requests an attorney

Explanation

Miranda requires that a person in custody be warned before interrogation of the right to remain silent and the right to appointed counsel, and that the person knowingly and voluntarily waive those rights. Absent a valid waiver, statements obtained during custodial interrogation are generally inadmissible.

Question 44Federal Criminal Law and Procedure

A suspect invokes his right to remain silent during custodial interrogation. Under Berghuis v. Thompkins, which statement best describes the effect of that invocation?

  1. Questioning must cease, but a later voluntary statement after fresh warnings may be admissible Correct answer.
  2. The invocation requires immediate release from custody without exception
  3. The invocation bars all future questioning for the life of the investigation
  4. Questioning may continue indefinitely and any statement is automatically admissible

Explanation

The Supreme Court has held that invocation of the right to remain silent requires the interrogation to stop, though a suspect may later waive the right and make a voluntary statement after receiving warnings. Invocation does not create a permanent bar, nor does it require release where custody is otherwise lawful.

Question 45Federal Criminal Law and Procedure

An agent stops a person in a public place based on reasonable suspicion that the person is involved in criminal activity. Under Terry v. Ohio, the agent may do which of the following?

  1. Conduct a limited pat-down for weapons if the agent reasonably believes the person is armed Correct answer.
  2. Search the person's home based on the same suspicion
  3. Conduct a full search of the person's belongings without further justification
  4. Detain the person for hours to complete an investigation

Explanation

Terry permits a brief investigatory stop on reasonable suspicion and a limited frisk for weapons when the officer reasonably believes the person is armed and dangerous. The frisk is confined to a pat-down for weapons, not a general search for evidence.

Question 46Federal Criminal Law and Procedure

Which constitutional amendment provides the basis for the exclusionary rule, which generally bars the government from using evidence obtained through unconstitutional searches and seizures?

  1. Fourth Amendment Correct answer.
  2. Fifth Amendment
  3. Sixth Amendment
  4. Eighth Amendment

Explanation

The exclusionary rule is a judicially created remedy associated with the Fourth Amendment's prohibition on unreasonable searches and seizures. It deters law enforcement violations by preventing the prosecution from using unlawfully obtained evidence.

Question 47Federal Criminal Law and Procedure

An agent obtains evidence during a warrantless search that the agent reasonably believed was authorized by a facially valid warrant later found defective. Under the good-faith exception, the evidence is generally which of the following?

  1. Admissible only if the suspect consents after the search
  2. Admissible, because the officer reasonably relied on the warrant Correct answer.
  3. Inadmissible unless the suspect waives the defect in writing
  4. Inadmissible, because the warrant was later found defective

Explanation

The good-faith exception allows admission of evidence when officers reasonably rely on a facially valid warrant later found defective, provided the reliance was objectively reasonable. The exception does not apply where the affidavit was so lacking in probable cause that reliance was unreasonable.

Question 48Federal Criminal Law and Procedure

Which of the following is an essential requirement for a valid consent search under the Fourth Amendment?

  1. Consent must be given only after Miranda warnings
  2. Consent must always be written and notarized
  3. Consent must be voluntary and given by a person with authority over the area searched Correct answer.
  4. Consent must be obtained by a judge

Explanation

A consent search is valid when consent is voluntary and given by someone with actual or apparent authority over the premises or items searched. Voluntariness is assessed from the totality of the circumstances, and written consent is not constitutionally required.

Question 49Federal Criminal Law and Procedure

An agent is investigating a felony and wants to make a warrantless arrest in a public place. Which standard generally applies under federal law?

  1. A warrant is always required for any felony arrest
  2. A grand jury indictment must precede the arrest
  3. Reasonable suspicion alone is sufficient
  4. Probable cause that the person committed the offense Correct answer.

Explanation

A warrantless arrest in a public place is lawful when the officer has probable cause to believe the person committed a felony. An arrest warrant is not constitutionally required for a public arrest based on probable cause.

Question 50Federal Criminal Law and Procedure

After a lawful arrest, an agent may search the arrestee's person and the area within the arrestee's immediate control. This authority is known as which of the following?

  1. Search incident to arrest Correct answer.
  2. The plain view doctrine
  3. The consent exception
  4. The automobile exception

Explanation

A search incident to a lawful arrest permits a warrantless search of the arrestee and the area within the arrestee's immediate control to prevent destruction of evidence and protect officer safety. It does not extend to areas beyond the arrestee's reach.