PCI Investigative Techniques & Procedures 2 — Questions and Answers
Question 1: When conducting a pretext interview, which ethical boundary must a PCI always observe?
- Avoid impersonating law enforcement officers (Correct answer)
- Use any cover story that obtains the needed information
- Record all calls regardless of state consent laws
- Promise immunity to witnesses in exchange for cooperation
Correct answer: Avoid impersonating law enforcement officers
Impersonating law enforcement is illegal and violates ASIS ethical standards, even during pretext operations.
Question 2: Which surveillance technique is most appropriate when the subject is known to vary their daily routine unpredictably?
- Fixed point surveillance only
- Mobile surveillance using multiple vehicles (Correct answer)
- Electronic monitoring exclusively
- Single-operator foot surveillance
Correct answer: Mobile surveillance using multiple vehicles
Mobile multi-vehicle surveillance allows investigators to adapt to unpredictable route changes while minimizing detection risk.
Question 3: A PCI discovers a witness is willing to provide information only off the record. What is the best initial approach?
- Refuse to meet unless the witness agrees to a recorded statement
- Listen to the information and assess its value before deciding next steps (Correct answer)
- Immediately report the witness to law enforcement
- Disregard the information as it cannot be used
Correct answer: Listen to the information and assess its value before deciding next steps
Off-the-record information can serve as investigative intelligence to identify leads, even if it cannot be used directly as evidence.
Question 4: In document examination, what does the term 'questioned document' refer to?
- Any document subpoenaed by a court
- A document whose authenticity or origin is in dispute (Correct answer)
- A document written in code or cipher
- A document that has been destroyed or altered
Correct answer: A document whose authenticity or origin is in dispute
A questioned document is any document whose authenticity, authorship, or integrity is at issue in an investigation.
Question 5: Which approach best protects chain of custody when collecting digital evidence at a scene?
- Power off devices immediately and place them in Faraday bags (Correct answer)
- Access the device to preview files before imaging
- Use the suspect's login credentials to copy files
- Email copies of files to the investigative team for review
Correct answer: Power off devices immediately and place them in Faraday bags
Powering off and isolating devices in Faraday bags prevents remote wiping and preserves evidence integrity for forensic imaging.
Question 6: When an investigator places a subject under extended mobile surveillance, the recommended team size for urban environments is typically:
- One investigator with high-powered optics
- Two investigators in a single vehicle
- Three or more investigators using leapfrog technique (Correct answer)
- Five investigators on foot only
Correct answer: Three or more investigators using leapfrog technique
Three or more investigators using leapfrog or ABC rotation minimizes burn risk in densely populated urban settings.
Question 7: A PCI is asked to obtain phone records from a carrier without a court order. The MOST legally sound method is to:
- Use a pretext call posing as the account holder
- Request records through a voluntary disclosure based on an emergency
- Advise the client that a subpoena or legal process is required (Correct answer)
- Purchase the records from a data broker
Correct answer: Advise the client that a subpoena or legal process is required
Obtaining phone records without proper legal process violates the Stored Communications Act; the investigator must advise the client to pursue formal legal channels.
When conducting a pretext interview, which ethical boundary must a PCI always observe?