CITP EXAM 3 ACTUAL EXAM - CRIMINAL INVESTIGATOR
TRAINING PROGRAM (CITP) - 2026/2027 ACADEMIC YEAR -
VERIFIED QUESTIONS AND ANSWERS
120 QUESTIONS
TABLE OF CONTENTS
# TOPIC
1 Apply constitutional and statutory law to investigative scenarios
2 Evaluate and integrate forensic and digital evidence in complex cases
3 Demonstrate proficiency in evidence collection, chain of custody, and courtroom testimony
4 Analyze criminal behavior and victimology to develop investigative strategies
5 Exercise ethical judgment and uphold professional standards in investigations
6 CITP Exam 3 Actual Exam
7 Criminal Investigator Training Program
8 CITP
9 2026
10 2027 Academic Year
11 Verified Questions and Answers
12 Foundations of Criminal Investigation
13 Applied Criminal Investigation
14 Advanced Criminal Investigation
15 Criminal Investigation Review
ABSTRACT
Page 1
,This study document brings together 120 carefully worded exam questions drawn from CITP Exam
3 Actual Exam - Criminal Investigator Training Program (CITP) - 2026/2027 Academic Year -
Verified Questions and Answers, with the strongest emphasis placed on Apply constitutional and
statutory law to investigative scenarios, Evaluate and integrate forensic and digital evidence in
complex cases, Demonstrate proficiency in evidence collection, chain of custody and and
courtroom testimony. Every item follows the wording style and level of reasoning you meet in the
real paper, and each one is paired with a clear rationale so the correct choice is never a guess.
Work through the set at your own pace, mark the questions that slow you down, then come back to
them until the reasoning feels automatic. Learners who revise this way walk into the exam room
recognising the pattern behind the questions instead of meeting them for the first time. Keep going
- steady, honest practice is what turns a difficult paper into a comfortable pass.
Q1 APPLY CONSTITUTIONAL AND STATUTORY LAW TO INVESTIGATIVE SCENARIOS
During a Title III wiretap, a suspect makes a call to an attorney. The investigator,
who is monitoring, hears the call and learns the attorney is advising the suspect to
dispose of evidence. Under current federal law, which action is most appropriate?
A. Immediately arrest the suspect and attorney for obstruction of justice.
B. Minimize the call and seek a court order to use the evidence. CORRECT
C. Include the call in the wiretap affidavit as a probable cause enhancement.
D. Disregard the call entirely because attorney-client privilege is absolute.
RATIONALE: Under federal wiretap law, privileged communications must be minimized unless a
court authorizes their interception. Even when privilege may not apply (crime-fraud exception),
the investigator cannot use the evidence without judicial approval. Arrest is premature, and
disregarding evidence is not required.
Page 2
,Q2 APPLY CONSTITUTIONAL AND STATUTORY LAW TO INVESTIGATIVE SCENARIOS
A forensic examiner receives a digital device that is encrypted with BitLocker. The
suspect provides a password under a court order, but the examiner discovers a
hidden volume protected by a different key. Which legal principle is most directly
implicated in compelling the suspect to provide the second password?
A. The Fifth Amendment self-incrimination clause, as testimony is compelled.
B. The Fourth Amendment search incident to arrest exception.
C. The foregone conclusion doctrine, which may waive Fifth Amendment protection. CORRECT
D. The plain view doctrine, as the device is lawfully seized.
RATIONALE: The foregone conclusion doctrine allows compelled decryption when the
government already knows the existence and location of the data, making the act of production
non-testimonial. The Fifth Amendment is not absolute, but the doctrine is the key exception.
Search incident to arrest and plain view do not apply to compelling passwords.
Q3 APPLY CONSTITUTIONAL AND STATUTORY LAW TO INVESTIGATIVE SCENARIOS
In a homicide investigation, a bloodstain pattern indicates a high-velocity impact
spatter. The suspect claims the victim was shot from a distance of less than two
feet. Which additional analysis would most effectively challenge this claim?
A. Determining the angle of impact using the width-to-length ratio of the spatters.
B. Analyzing the distribution of backspatter on the suspect's clothing. CORRECT
C. Conducting a luminol test to identify latent bloodstains.
D. Measuring the diameter of the impact sites to estimate the force used.
RATIONALE: High-velocity impact spatter is typically associated with gunshots, but backspatter
on the shooter's clothing can indicate firing distance and position. Angle of impact helps with
directionality, not distance. Luminol detects latent blood, and spatter diameter relates to force, not
distance. Backspatter analysis directly tests the proximity claim.
Page 3
, Q4 APPLY CONSTITUTIONAL AND STATUTORY LAW TO INVESTIGATIVE SCENARIOS
An investigator is preparing to testify about a forensic analysis conducted by a
colleague who is unavailable. The analysis is based on a novel scientific technique
that has not been widely accepted. Under Daubert, which factor is most critical for
the court to consider?
A. Whether the technique has been subjected to peer review and publication. CORRECT
B. Whether the colleague is a certified expert in the field.
C. Whether the evidence was collected under a valid search warrant.
D. Whether the investigator personally observed the analysis.
RATIONALE: Daubert emphasizes testability, peer review, error rates, and general acceptance.
Peer review and publication are central. Certification of the absent analyst is relevant to
qualifications, but the technique's reliability is the key. Search warrant and personal observation
do not address scientific validity.
Q5 APPLY CONSTITUTIONAL AND STATUTORY LAW TO INVESTIGATIVE SCENARIOS
In a financial fraud investigation, the investigator obtains bank records showing a
series of international wire transfers. To trace the funds effectively, which
analytical method is most appropriate?
A. Link analysis to map relationships between accounts and individuals. CORRECT
B. Time-series analysis to identify seasonal spending patterns.
C. Network analysis solely focusing on communication metadata.
D. Benford's Law to detect anomalies in the transaction amounts.
RATIONALE: Link analysis is designed to visualize relationships and flow of funds between
entities, making it ideal for tracing wire transfers. Time-series focuses on timing patterns, not
relationships. Network analysis of communications is tangential. Benford's Law detects
anomalies but does not trace the path of funds.
Page 4
TRAINING PROGRAM (CITP) - 2026/2027 ACADEMIC YEAR -
VERIFIED QUESTIONS AND ANSWERS
120 QUESTIONS
TABLE OF CONTENTS
# TOPIC
1 Apply constitutional and statutory law to investigative scenarios
2 Evaluate and integrate forensic and digital evidence in complex cases
3 Demonstrate proficiency in evidence collection, chain of custody, and courtroom testimony
4 Analyze criminal behavior and victimology to develop investigative strategies
5 Exercise ethical judgment and uphold professional standards in investigations
6 CITP Exam 3 Actual Exam
7 Criminal Investigator Training Program
8 CITP
9 2026
10 2027 Academic Year
11 Verified Questions and Answers
12 Foundations of Criminal Investigation
13 Applied Criminal Investigation
14 Advanced Criminal Investigation
15 Criminal Investigation Review
ABSTRACT
Page 1
,This study document brings together 120 carefully worded exam questions drawn from CITP Exam
3 Actual Exam - Criminal Investigator Training Program (CITP) - 2026/2027 Academic Year -
Verified Questions and Answers, with the strongest emphasis placed on Apply constitutional and
statutory law to investigative scenarios, Evaluate and integrate forensic and digital evidence in
complex cases, Demonstrate proficiency in evidence collection, chain of custody and and
courtroom testimony. Every item follows the wording style and level of reasoning you meet in the
real paper, and each one is paired with a clear rationale so the correct choice is never a guess.
Work through the set at your own pace, mark the questions that slow you down, then come back to
them until the reasoning feels automatic. Learners who revise this way walk into the exam room
recognising the pattern behind the questions instead of meeting them for the first time. Keep going
- steady, honest practice is what turns a difficult paper into a comfortable pass.
Q1 APPLY CONSTITUTIONAL AND STATUTORY LAW TO INVESTIGATIVE SCENARIOS
During a Title III wiretap, a suspect makes a call to an attorney. The investigator,
who is monitoring, hears the call and learns the attorney is advising the suspect to
dispose of evidence. Under current federal law, which action is most appropriate?
A. Immediately arrest the suspect and attorney for obstruction of justice.
B. Minimize the call and seek a court order to use the evidence. CORRECT
C. Include the call in the wiretap affidavit as a probable cause enhancement.
D. Disregard the call entirely because attorney-client privilege is absolute.
RATIONALE: Under federal wiretap law, privileged communications must be minimized unless a
court authorizes their interception. Even when privilege may not apply (crime-fraud exception),
the investigator cannot use the evidence without judicial approval. Arrest is premature, and
disregarding evidence is not required.
Page 2
,Q2 APPLY CONSTITUTIONAL AND STATUTORY LAW TO INVESTIGATIVE SCENARIOS
A forensic examiner receives a digital device that is encrypted with BitLocker. The
suspect provides a password under a court order, but the examiner discovers a
hidden volume protected by a different key. Which legal principle is most directly
implicated in compelling the suspect to provide the second password?
A. The Fifth Amendment self-incrimination clause, as testimony is compelled.
B. The Fourth Amendment search incident to arrest exception.
C. The foregone conclusion doctrine, which may waive Fifth Amendment protection. CORRECT
D. The plain view doctrine, as the device is lawfully seized.
RATIONALE: The foregone conclusion doctrine allows compelled decryption when the
government already knows the existence and location of the data, making the act of production
non-testimonial. The Fifth Amendment is not absolute, but the doctrine is the key exception.
Search incident to arrest and plain view do not apply to compelling passwords.
Q3 APPLY CONSTITUTIONAL AND STATUTORY LAW TO INVESTIGATIVE SCENARIOS
In a homicide investigation, a bloodstain pattern indicates a high-velocity impact
spatter. The suspect claims the victim was shot from a distance of less than two
feet. Which additional analysis would most effectively challenge this claim?
A. Determining the angle of impact using the width-to-length ratio of the spatters.
B. Analyzing the distribution of backspatter on the suspect's clothing. CORRECT
C. Conducting a luminol test to identify latent bloodstains.
D. Measuring the diameter of the impact sites to estimate the force used.
RATIONALE: High-velocity impact spatter is typically associated with gunshots, but backspatter
on the shooter's clothing can indicate firing distance and position. Angle of impact helps with
directionality, not distance. Luminol detects latent blood, and spatter diameter relates to force, not
distance. Backspatter analysis directly tests the proximity claim.
Page 3
, Q4 APPLY CONSTITUTIONAL AND STATUTORY LAW TO INVESTIGATIVE SCENARIOS
An investigator is preparing to testify about a forensic analysis conducted by a
colleague who is unavailable. The analysis is based on a novel scientific technique
that has not been widely accepted. Under Daubert, which factor is most critical for
the court to consider?
A. Whether the technique has been subjected to peer review and publication. CORRECT
B. Whether the colleague is a certified expert in the field.
C. Whether the evidence was collected under a valid search warrant.
D. Whether the investigator personally observed the analysis.
RATIONALE: Daubert emphasizes testability, peer review, error rates, and general acceptance.
Peer review and publication are central. Certification of the absent analyst is relevant to
qualifications, but the technique's reliability is the key. Search warrant and personal observation
do not address scientific validity.
Q5 APPLY CONSTITUTIONAL AND STATUTORY LAW TO INVESTIGATIVE SCENARIOS
In a financial fraud investigation, the investigator obtains bank records showing a
series of international wire transfers. To trace the funds effectively, which
analytical method is most appropriate?
A. Link analysis to map relationships between accounts and individuals. CORRECT
B. Time-series analysis to identify seasonal spending patterns.
C. Network analysis solely focusing on communication metadata.
D. Benford's Law to detect anomalies in the transaction amounts.
RATIONALE: Link analysis is designed to visualize relationships and flow of funds between
entities, making it ideal for tracing wire transfers. Time-series focuses on timing patterns, not
relationships. Network analysis of communications is tangential. Benford's Law detects
anomalies but does not trace the path of funds.
Page 4
