The Ultimate and Complete CITP Exam 3 Study Guide 2026–2027, Covering Criminal
Investigator Training Program Legal Principles, Constitutional Law, Fourth Fifth and
Sixth Amendment Concepts, Federal Criminal Law and Procedure, Search and
Seizure, Evidence and Courtroom Procedures, Investigative Operations, Case
Management, Search Warrants and Arrest Warrants, Interviewing and Interrogation,
Surveillance and Undercover Operations, Informants, Digital Evidence and Electronic
Investigations, Report Writing and Documentation, Officer Safety, Use of Force,
Operational Planning, Financial and Investigative Information Sources, Practical
Investigation Scenarios, Practice Questions With Detailed Rationales, Clinical-Style
Case Analysis, and Proven Strategies for Preparing for CITP Exam 3
Question 1: In the context of the Fourth Amendment, which of the following scenarios most
accurately describes a "search" that would trigger constitutional protections, as defined by
the Katz v. United States reasonable expectation of privacy test?
A. A police officer uses a thermal imaging device from a public street to detect high levels of
heat emanating from a private residence, indicating the possible use of high-intensity grow
lamps.
B. A police officer, while lawfully in a private residence, observes a handgun in plain view on a
coffee table.
C. A police officer examines the exterior of a vehicle parked in a public parking lot and notes
that the vehicle identification number (VIN) is visible through the windshield.
D. A police officer follows a suspect's vehicle on a public highway, visually tracking its
movements and noting its final destination.
CORRECT ANSWER: A. A police officer uses a thermal imaging device from a public street to
detect high levels of heat emanating from a private residence, indicating the possible use of
high-intensity grow lamps.
Rationale: Under Katz, a search occurs when the government violates a person's "reasonable
expectation of privacy." The use of technology (thermal imaging) not in general public use to
explore details of a home that would previously have been unknowable without physical
intrusion constitutes a search, as per Kyllo v. United States. Options B, C, and D describe
situations where the item or activity is in plain view or public observation, which generally do
not constitute a search under the Fourth Amendment.
Question 2: An investigator is interviewing a witness who appears to be genuinely trying to
recall events but is providing information that is fragmented and inconsistent with known
physical evidence. Which of the following interviewing techniques is most appropriate to
address this situation without compromising the integrity of the statement?
A. Challenge the witness directly with the contradictory physical evidence to force a correction.
B. Terminate the interview immediately to avoid the contamination of the official record.
C. Use cognitive interviewing techniques to help the witness mentally reinstate the context of
,the event.
D. Re-interview the witness at a later date after providing them with a written summary of the
evidence.
CORRECT ANSWER: C. Use cognitive interviewing techniques to help the witness mentally
reinstate the context of the event.
Rationale: Cognitive interviewing is designed to enhance memory retrieval by having the
witness reconstruct the environmental and personal context of the event. This can help recover
fragmented memories without leading the witness or creating a false memory. Directly
confronting the witness with evidence (A) can cause them to become defensive or alter their
story to fit the facts. Terminating the interview (B) might result in a loss of valuable
information. Providing evidence before the interview (D) can lead to contamination and false
testimony.
Question 3: During a Title III electronic surveillance operation, an agent intercepts a
communication that is clearly privileged attorney-client communication. What is the proper
legal procedure for handling this intercepted communication?
A. The agent may use the communication as evidence, provided the attorney is a subject of the
investigation.
B. The agent must minimize the communication, cease its interception, and report it to a
supervisor for a potential "taint team" review.
C. The agent can continue to monitor the communication but must seal the recording and not
transcribe it.
D. The agent must immediately destroy the recording to avoid any violation of the attorney-
client privilege.
CORRECT ANSWER: B. The agent must minimize the communication, cease its interception,
and report it to a supervisor for a potential "taint team" review.
Rationale: Title III and Department of Justice guidelines require minimization of interceptions to
avoid capturing privileged communications. If an agent inadvertently intercepts a privileged
conversation, they are required to minimize (stop listening), report it, and it is often handled by
a "taint team" or "clean team" to assess the privilege claim and ensure the investigative team is
not exposed to the privileged information. It is not automatically usable (A), nor can it simply be
destroyed without proper procedure (D).
Question 4: In a complex financial fraud investigation, what is the primary purpose of
obtaining and analyzing bank records using a grand jury subpoena versus an administrative
subpoena?
A. Grand jury subpoenas compel the production of records without the need for a court order,
whereas administrative subpoenas require a judge's signature.
B. Grand jury subpoenas are issued by the court and offer a higher degree of secrecy and
,immunity from civil liability for the person producing the records.
C. Grand jury subpoenas are used exclusively for cases involving tax evasion, while
administrative subpoenas are for all other financial crimes.
D. A grand jury subpoena can only be issued in federal court, while an administrative subpoena
can be used in both state and federal investigations.
CORRECT ANSWER: B. Grand jury subpoenas are issued by the court and offer a higher degree
of secrecy and immunity from civil liability for the person producing the records.
Rationale: A grand jury subpoena is a court-ordered process that is secret and compels
testimony or document production. It provides immunity (use and derivative use) to the
witness. An administrative subpoena is a non-judicial process issued by an agency and carries
no such immunity. The statement in A is incorrect because both are not court orders in the
same way; a grand jury subpoena is judicial. They are not exclusive to tax evasion (C), and both
can be used in federal cases (D).
Question 5: The Federal Rules of Evidence (FRE) define "hearsay" as an out-of-court
statement offered to prove the truth of the matter asserted. Which of the following
statements would be LEAST likely to be excluded as hearsay?
A. A witness testifies, "My friend told me that he saw the defendant leave the building with a
gun."
B. The prosecutor introduces a written diary entry in which the victim wrote, "I am afraid of the
defendant."
C. An expert witness testifies that, in her opinion, the defendant's actions were consistent with
a "financial pressure" motive, based on data from a government database.
D. A police officer testifies, "The dispatch told me that a burglary was in progress at 123 Main
Street," to explain why he went to the location.
CORRECT ANSWER: D. A police officer testifies, "The dispatch told me that a burglary was in
progress at 123 Main Street," to explain why he went to the location.
Rationale: The officer's statement is not offered to prove that a burglary was actually in
progress (the truth of the matter), but to explain the officer's subsequent conduct (why he
went to the scene). This is a classic non-hearsay purpose. Option A is classic hearsay. Option B is
the victim's state of mind, which is a hearsay exception, but it is still hearsay. Option C is expert
testimony based on data, which can be relied upon by experts, but the underlying data is not
the testimony itself.
Question 6: An agent is preparing an affidavit for a search warrant. Which of the following is
the most critical requirement to ensure the warrant is constitutionally valid?
A. The affidavit must contain a list of all the evidence the agent expects to find.
B. The affidavit must establish probable cause, with a substantial basis for believing the
evidence will be found at the location.
, C. The affidavit must include the sworn statements of at least two separate civilian witnesses.
D. The affidavit must be approved by a magistrate before the warrant is executed, not after.
CORRECT ANSWER: B. The affidavit must establish probable cause, with a substantial basis for
believing the evidence will be found at the location.
Rationale: The Fourth Amendment requires that warrants be issued only upon probable cause,
supported by Oath or affirmation, and particularly describing the place to be searched and the
persons or things to be seized. The "totality of the circumstances" test from Illinois v. Gates is
used to assess probable cause in an affidavit. A is too specific; the warrant must describe items
with particularity, but it does not need to list every item. C is false; an affidavit can be based on
a single informant or officer's observations. D is incorrect because a warrant is always approved
before execution.
Question 7: In the context of conducting a surveillance operation, which of the following
techniques is considered a form of "physical surveillance" that is most likely to be challenged
as a Fourth Amendment "search"?
A. A stationary post from a public sidewalk across the street from a suspect's home.
B. Following a suspect's car on a public interstate.
C. Installing a GPS tracking device on a suspect's vehicle while it is parked in a public lot.
D. Searching the suspect's garbage after it has been placed on the curb for collection.
CORRECT ANSWER: C. Installing a GPS tracking device on a suspect's vehicle while it is parked
in a public lot.
Rationale: The Supreme Court in United States v. Jones held that installing a GPS device on a
vehicle constitutes a physical trespass and is a "search" under the Fourth Amendment. This is
distinguished from visual surveillance (A and B) or examining abandoned property like trash (D),
which do not typically constitute a search because there is no reasonable expectation of privacy
in public movements or abandoned items.
Question 8: A critical aspect of an effective undercover operation is maintaining a "cover
story." What is the primary purpose of a cover story?
A. To provide legal justification for the undercover agent's actions in a criminal trial.
B. To facilitate the agent's integration into the target environment and elicit information
without revealing the agent's true identity.
C. To document the operational plan for administrative review.
D. To ensure the agent's safety by providing an exit strategy.
CORRECT ANSWER: B. To facilitate the agent's integration into the target environment and
elicit information without revealing the agent's true identity.
Rationale: A cover story is a fabricated background, occupation, and reason for being in the
target environment. Its primary purpose is to provide a plausible explanation for the agent's
Investigator Training Program Legal Principles, Constitutional Law, Fourth Fifth and
Sixth Amendment Concepts, Federal Criminal Law and Procedure, Search and
Seizure, Evidence and Courtroom Procedures, Investigative Operations, Case
Management, Search Warrants and Arrest Warrants, Interviewing and Interrogation,
Surveillance and Undercover Operations, Informants, Digital Evidence and Electronic
Investigations, Report Writing and Documentation, Officer Safety, Use of Force,
Operational Planning, Financial and Investigative Information Sources, Practical
Investigation Scenarios, Practice Questions With Detailed Rationales, Clinical-Style
Case Analysis, and Proven Strategies for Preparing for CITP Exam 3
Question 1: In the context of the Fourth Amendment, which of the following scenarios most
accurately describes a "search" that would trigger constitutional protections, as defined by
the Katz v. United States reasonable expectation of privacy test?
A. A police officer uses a thermal imaging device from a public street to detect high levels of
heat emanating from a private residence, indicating the possible use of high-intensity grow
lamps.
B. A police officer, while lawfully in a private residence, observes a handgun in plain view on a
coffee table.
C. A police officer examines the exterior of a vehicle parked in a public parking lot and notes
that the vehicle identification number (VIN) is visible through the windshield.
D. A police officer follows a suspect's vehicle on a public highway, visually tracking its
movements and noting its final destination.
CORRECT ANSWER: A. A police officer uses a thermal imaging device from a public street to
detect high levels of heat emanating from a private residence, indicating the possible use of
high-intensity grow lamps.
Rationale: Under Katz, a search occurs when the government violates a person's "reasonable
expectation of privacy." The use of technology (thermal imaging) not in general public use to
explore details of a home that would previously have been unknowable without physical
intrusion constitutes a search, as per Kyllo v. United States. Options B, C, and D describe
situations where the item or activity is in plain view or public observation, which generally do
not constitute a search under the Fourth Amendment.
Question 2: An investigator is interviewing a witness who appears to be genuinely trying to
recall events but is providing information that is fragmented and inconsistent with known
physical evidence. Which of the following interviewing techniques is most appropriate to
address this situation without compromising the integrity of the statement?
A. Challenge the witness directly with the contradictory physical evidence to force a correction.
B. Terminate the interview immediately to avoid the contamination of the official record.
C. Use cognitive interviewing techniques to help the witness mentally reinstate the context of
,the event.
D. Re-interview the witness at a later date after providing them with a written summary of the
evidence.
CORRECT ANSWER: C. Use cognitive interviewing techniques to help the witness mentally
reinstate the context of the event.
Rationale: Cognitive interviewing is designed to enhance memory retrieval by having the
witness reconstruct the environmental and personal context of the event. This can help recover
fragmented memories without leading the witness or creating a false memory. Directly
confronting the witness with evidence (A) can cause them to become defensive or alter their
story to fit the facts. Terminating the interview (B) might result in a loss of valuable
information. Providing evidence before the interview (D) can lead to contamination and false
testimony.
Question 3: During a Title III electronic surveillance operation, an agent intercepts a
communication that is clearly privileged attorney-client communication. What is the proper
legal procedure for handling this intercepted communication?
A. The agent may use the communication as evidence, provided the attorney is a subject of the
investigation.
B. The agent must minimize the communication, cease its interception, and report it to a
supervisor for a potential "taint team" review.
C. The agent can continue to monitor the communication but must seal the recording and not
transcribe it.
D. The agent must immediately destroy the recording to avoid any violation of the attorney-
client privilege.
CORRECT ANSWER: B. The agent must minimize the communication, cease its interception,
and report it to a supervisor for a potential "taint team" review.
Rationale: Title III and Department of Justice guidelines require minimization of interceptions to
avoid capturing privileged communications. If an agent inadvertently intercepts a privileged
conversation, they are required to minimize (stop listening), report it, and it is often handled by
a "taint team" or "clean team" to assess the privilege claim and ensure the investigative team is
not exposed to the privileged information. It is not automatically usable (A), nor can it simply be
destroyed without proper procedure (D).
Question 4: In a complex financial fraud investigation, what is the primary purpose of
obtaining and analyzing bank records using a grand jury subpoena versus an administrative
subpoena?
A. Grand jury subpoenas compel the production of records without the need for a court order,
whereas administrative subpoenas require a judge's signature.
B. Grand jury subpoenas are issued by the court and offer a higher degree of secrecy and
,immunity from civil liability for the person producing the records.
C. Grand jury subpoenas are used exclusively for cases involving tax evasion, while
administrative subpoenas are for all other financial crimes.
D. A grand jury subpoena can only be issued in federal court, while an administrative subpoena
can be used in both state and federal investigations.
CORRECT ANSWER: B. Grand jury subpoenas are issued by the court and offer a higher degree
of secrecy and immunity from civil liability for the person producing the records.
Rationale: A grand jury subpoena is a court-ordered process that is secret and compels
testimony or document production. It provides immunity (use and derivative use) to the
witness. An administrative subpoena is a non-judicial process issued by an agency and carries
no such immunity. The statement in A is incorrect because both are not court orders in the
same way; a grand jury subpoena is judicial. They are not exclusive to tax evasion (C), and both
can be used in federal cases (D).
Question 5: The Federal Rules of Evidence (FRE) define "hearsay" as an out-of-court
statement offered to prove the truth of the matter asserted. Which of the following
statements would be LEAST likely to be excluded as hearsay?
A. A witness testifies, "My friend told me that he saw the defendant leave the building with a
gun."
B. The prosecutor introduces a written diary entry in which the victim wrote, "I am afraid of the
defendant."
C. An expert witness testifies that, in her opinion, the defendant's actions were consistent with
a "financial pressure" motive, based on data from a government database.
D. A police officer testifies, "The dispatch told me that a burglary was in progress at 123 Main
Street," to explain why he went to the location.
CORRECT ANSWER: D. A police officer testifies, "The dispatch told me that a burglary was in
progress at 123 Main Street," to explain why he went to the location.
Rationale: The officer's statement is not offered to prove that a burglary was actually in
progress (the truth of the matter), but to explain the officer's subsequent conduct (why he
went to the scene). This is a classic non-hearsay purpose. Option A is classic hearsay. Option B is
the victim's state of mind, which is a hearsay exception, but it is still hearsay. Option C is expert
testimony based on data, which can be relied upon by experts, but the underlying data is not
the testimony itself.
Question 6: An agent is preparing an affidavit for a search warrant. Which of the following is
the most critical requirement to ensure the warrant is constitutionally valid?
A. The affidavit must contain a list of all the evidence the agent expects to find.
B. The affidavit must establish probable cause, with a substantial basis for believing the
evidence will be found at the location.
, C. The affidavit must include the sworn statements of at least two separate civilian witnesses.
D. The affidavit must be approved by a magistrate before the warrant is executed, not after.
CORRECT ANSWER: B. The affidavit must establish probable cause, with a substantial basis for
believing the evidence will be found at the location.
Rationale: The Fourth Amendment requires that warrants be issued only upon probable cause,
supported by Oath or affirmation, and particularly describing the place to be searched and the
persons or things to be seized. The "totality of the circumstances" test from Illinois v. Gates is
used to assess probable cause in an affidavit. A is too specific; the warrant must describe items
with particularity, but it does not need to list every item. C is false; an affidavit can be based on
a single informant or officer's observations. D is incorrect because a warrant is always approved
before execution.
Question 7: In the context of conducting a surveillance operation, which of the following
techniques is considered a form of "physical surveillance" that is most likely to be challenged
as a Fourth Amendment "search"?
A. A stationary post from a public sidewalk across the street from a suspect's home.
B. Following a suspect's car on a public interstate.
C. Installing a GPS tracking device on a suspect's vehicle while it is parked in a public lot.
D. Searching the suspect's garbage after it has been placed on the curb for collection.
CORRECT ANSWER: C. Installing a GPS tracking device on a suspect's vehicle while it is parked
in a public lot.
Rationale: The Supreme Court in United States v. Jones held that installing a GPS device on a
vehicle constitutes a physical trespass and is a "search" under the Fourth Amendment. This is
distinguished from visual surveillance (A and B) or examining abandoned property like trash (D),
which do not typically constitute a search because there is no reasonable expectation of privacy
in public movements or abandoned items.
Question 8: A critical aspect of an effective undercover operation is maintaining a "cover
story." What is the primary purpose of a cover story?
A. To provide legal justification for the undercover agent's actions in a criminal trial.
B. To facilitate the agent's integration into the target environment and elicit information
without revealing the agent's true identity.
C. To document the operational plan for administrative review.
D. To ensure the agent's safety by providing an exit strategy.
CORRECT ANSWER: B. To facilitate the agent's integration into the target environment and
elicit information without revealing the agent's true identity.
Rationale: A cover story is a fabricated background, occupation, and reason for being in the
target environment. Its primary purpose is to provide a plausible explanation for the agent's
