1. When conducting surveillance at night, an investigator should use a camera equipped with:
- A.A standard flash to illuminate subjects
- B.A wide-angle lens only
- C.A smartphone camera for convenience
- D.A telephoto lens with image stabilization and high ISO/low-light capability (correct answer)
Reference: Surveillance equipment best practice
2. Serving a subpoena for deposition on a corporate officer in Illinois can be accomplished by serving:
- A.The registered agent of the corporation or an officer of the corporation (correct answer)
- B.Any employee at the company's office
- C.Posting it on the building entrance
- D.Emailing it to the corporation's website contact form
Reference: 735 ILCS 5/2-204
3. In a two-person executive protection detail, when the principal enters an elevator, the agents should:
- A.Both wait outside until the elevator returns
- B.One agent enters first to inspect and hold the elevator; both agents ride with the principal (correct answer)
- C.Both enter after the principal and face the door
- D.Only one agent rides; the other takes the stairs
Reference: EP elevator protocols
4. A private investigator conducting online (OSINT) research discovers the subject's home address through public social media posts. Using this information to:
- A.Conduct surveillance at the address is generally legal
- B.Share the address publicly is always protected speech
- C.Stalk or harass the subject is a felony under 720 ILCS 5/12-7.3 (correct answer)
- D.Enter the property is permitted with client authorization
Reference: 720 ILCS 5/12-7.3 Stalking
5. A surveillance team loses visual contact with a subject in a shopping mall. The best immediate tactic is to:
- A.Leave and call it a day
- B.Contact police for assistance
- C.Call the subject's phone to locate them
- D.Split team to cover all exits and attempt to relocate (correct answer)
Reference: Mobile surveillance lost-contact protocol
6. Under Illinois law, what distinguishes a 'private detective agency' from an individual private detective license?
- A.An agency license is required to employ licensed detectives and operate a commercial detective business (correct answer)
- B.There is no legal distinction
- C.An agency license allows carrying firearms
- D.An agency license is issued by county sheriffs
Reference: 225 ILCS 447
7. When handcuffing a combative subject, the technique of controlling the dominant wrist first is recommended because:
- A.It is easier to apply one cuff at a time
- B.Controlling the stronger/dominant hand reduces the subject's ability to resist (correct answer)
- C.The law requires dominant-hand-first application
- D.It allows the officer to maintain a firearms-ready position
Reference: Defensive tactics / handcuffing
8. Which of the following is an example of 'pretexting' that would be ILLEGAL in Illinois?
- A.A PI calling and asking open-ended questions without identifying themselves
- B.Observing a subject from a public location using a cover story
- C.Impersonating a law enforcement officer to obtain information (correct answer)
- D.Using a fictitious business name on a business card
Reference: 720 ILCS 5/17-2 (Impersonation of peace officer)
9. A bodyguard's protective detail plan should include:
- A.Only the route to the venue
- B.Media schedule and press contacts
- C.Social itinerary for the principal only
- D.Primary and alternate routes, emergency medical contacts, threat assessments, and communication protocols (correct answer)
Reference: EP operations plan standard
10. Illinois law defines 'stalking' in a surveillance context when an investigator:
- A.Knowingly engages in a course of conduct directed at a specific person that causes them to fear for their safety (correct answer)
- B.Follows a subject on more than one occasion
- C.Takes photographs on a public street
- D.Reviews publicly available records
Reference: 720 ILCS 5/12-7.3
11. During a deposition preparation session, a PI who has gathered evidence should:
- A.Testify on the client's behalf as to what they believe happened
- B.Provide factual, first-hand observations and authenticated documentation only (correct answer)
- C.Offer legal opinions about the case
- D.Withhold information damaging to the client
Reference: Professional investigative ethics
12. A client instructs a PI to intercept communications between two parties. Under Illinois law this is:
- A.Legal if the client owns the phone being monitored
- B.Legal with one-party consent in Illinois
- C.Generally prohibited under the Illinois Eavesdropping Act (720 ILCS 5/14) (correct answer)
- D.Only legal if a court order is obtained by the PI directly
Reference: 720 ILCS 5/14 — Illinois is an all-party consent state
13. The 'bubble' or 'personal security zone' in executive protection is typically maintained at a radius of:
- A.1 foot
- B.100 yards
- C.50 feet at all times
- D.3–10 feet depending on threat level and environment (correct answer)
Reference: EP personal security zone standard
14. Which is the correct order of priorities for a bodyguard when an attack occurs?
- A.Detect, react to cover/neutralize threat, evacuate principal, notify authorities (correct answer)
- B.Counter-attack, evacuate, notify police
- C.Evacuate principal, then return to engage the threat
- D.Draw weapon immediately and engage
Reference: EP attack response protocol
15. A process server cannot locate the defendant and learns they have moved to another county in Illinois. Service must be:
- A.Re-filed in the new county only
- B.Attempted in the new county under the same summons while it remains valid (correct answer)
- C.Abandoned because the original summons is void
- D.Made by certified mail automatically
Reference: 735 ILCS 5/2-202
16. When documenting a surveillance operation for use in court, video evidence should include:
- A.Only the most dramatic footage
- B.Edited highlights selected by the client
- C.Continuous unedited footage with embedded date/time stamp, and an unbroken chain of custody (correct answer)
- D.Still photos only as video is inadmissible
Reference: Evidence admissibility standard
17. The term 'counter-surveillance' in executive protection refers to:
- A.Surveillance of a competing security firm
- B.Monitoring social media for threats
- C.Installing cameras at the principal's home
- D.Detecting and identifying individuals who may be surveilling the principal (correct answer)
Reference: EP counter-surveillance
18. A private security officer may use deadly force in Illinois to defend themselves or another when:
- A.They reasonably believe such force is necessary to prevent imminent death or great bodily harm (correct answer)
- B.Property is being stolen
- C.Any physical assault occurs
- D.Their employer authorizes it in writing
Reference: 720 ILCS 5/7-1
19. Process serving on a minor in Illinois requires service to be made on:
- A.The minor directly if over age 10
- B.A parent, guardian, or person having custody, in addition to service on the minor if age 14 or over (correct answer)
- C.The minor's school principal
- D.The county clerk
Reference: 735 ILCS 5/2-203
20. Which of the following best describes the 'L-shape' surveillance formation?
- A.Two vehicles following the subject in a straight line
- B.Three vehicles in a triangular pattern
- C.One vehicle behind the subject and one positioned ahead on a parallel street to intercept (correct answer)
- D.A single vehicle with a rotating follow pattern
Reference: Team surveillance formation