PCI Cheat Sheet 2026

The 30 highest-yield PCI facts, distilled from real exam questions. Print it, save it as a PDF, or study it here — free, no sign-up.

1. A subject claims to hold a professional license. Which of the following is the MOST authoritative method to verify this claim? → Checking the issuing state licensing board's official public database
2. What is the primary purpose of a forensic accounting examination in an investigation? → To analyze financial records to detect fraud, embezzlement, or other financial crimes
3. When an investigator receives a new case assignment, what should be the FIRST action taken? → Review the case file and identify investigative objectives
4. Which practice is most likely to undermine an investigator's credibility during cross-examination? → Providing different factual accounts than what appears in the written report
5. What is exception reporting in retail loss prevention? → Automated flagging of unusual transactions or activities that deviate from normal patterns
6. An investigator is interviewing a subject from a culture where avoiding direct eye contact is a sign of respect. The investigator should: → Disregard eye contact as a behavioral indicator for this subject
7. What is the primary purpose of a chain of custody document in an investigation? → To record every person who handled evidence and when
8. An investigator suspects insurance fraud involving staged vehicle accidents. Which technique is MOST effective for building the case? → Analyzing claim histories, conducting surveillance, and canvassing witnesses
9. When documenting a witness interview, investigators should record: → Verbatim statements, date, time, location, and witness identification
10. In financial fraud investigations, 'asset tracing' is best accomplished by: → Reviewing public records, court filings, and financial institution disclosures
11. Which principle requires that investigative methods be proportional to the seriousness of the alleged wrongdoing? → Proportionality principle
12. When an investigator must transport liquid evidence samples, the proper packaging method is to: → Place sealed containers in secondary leakproof containers with absorbent material
13. A case that has been inactive for an extended period should be: → Reviewed to determine if it should be suspended, continued, or closed
14. In digital forensics, the concept of 'write blocking' refers to: → Using hardware or software to prevent modification of digital evidence during examination
15. What is the PRIMARY purpose of continuing education requirements in Interview & Interrogation Techniques for PCI professionals? → Maintaining current knowledge and competency as the field evolves
16. Chronological organization in an investigative report is most appropriate when: → The sequence of events is central to establishing facts such as motive or opportunity
17. What is the role of consent in conducting an investigation? → Consent must be obtained for searches and evidence collection in some cases.
18. Why is case file organization important in an investigation? → It prevents the loss of important documents and evidence.
19. How should an investigator handle conflicts of interest? → Disclose the conflict and recuse themselves from the investigation if necessary.
20. What is the role of case notes in investigations? → They help track progress and provide insight into the investigation process.
21. Which factor MOST affects the admissibility of recorded surveillance evidence in a civil proceeding? → Proper chain of custody and accurate documentation of how evidence was collected
22. In Background Investigation Procedures, what is the FIRST step a PCI professional should take when encountering a new case or situation? → Conduct a comprehensive assessment and gather all relevant information
23. Which of the following BEST describes the purpose of a pre-investigation conference? → To align the investigator, client, and legal counsel on objectives and constraints
24. Under the Federal Wiretap Act (Title III of the Omnibus Crime Control Act), intercepting a wire communication without consent generally requires: → A court order (judicial authorization)
25. Which type of surveillance is MOST appropriate when the subject's schedule is unpredictable and location is unknown? → Electronic monitoring via social media and open-source intelligence
26. What is the PRIMARY purpose of continuing education requirements in Surveillance Methods & Technology for PCI professionals? → Maintaining current knowledge and competency as the field evolves
27. When conducting a pretext interview, which ethical boundary must a PCI always observe? → Avoid impersonating law enforcement officers
28. Which approach best protects chain of custody when collecting digital evidence at a scene? → Power off devices immediately and place them in Faraday bags
29. A PCI is planning an investigation in which electronic evidence may be relevant. The MOST critical early planning step is to: → Issue a legal hold to preserve potentially relevant electronic data
30. When collecting latent fingerprints, the investigator should document them by: → Photographing them before any processing or lifting