1. During a foot surveillance, an investigator should:
- A.Maintain constant eye contact with the subject
- B.Wear a uniform to blend in with security personnel
- C.Stay within arm's reach of the subject at all times
- D.Use natural cover, vary pace and position, and avoid predictable patterns (correct answer)
Reference: Foot surveillance technique
2. A private detective hired by an employer to investigate an employee may face legal exposure if they:
- A.Access the employee's private email without authorization (correct answer)
- B.Review publicly available social media
- C.Interview co-workers during work hours
- D.Conduct surveillance during the employee's off-work hours in public
Reference: Computer Fraud and Abuse Act / 720 ILCS 5/14
3. Which is a lawful use of a TASER or stun device by a licensed private security officer in Illinois?
- A.To enforce compliance in any situation
- B.As intermediate force when a subject is actively resisting and deadly force is not yet justified (correct answer)
- C.On anyone who refuses to leave private property
- D.As a deterrent at a security checkpoint
Reference: Use-of-force continuum / 720 ILCS 5/7-1
4. A bodyguard's communication plan should include:
- A.Social media usernames for the principal
- B.The principal's personal cell phone number only
- C.Primary and backup communication devices, challenge codes, and emergency contact numbers (correct answer)
- D.Local restaurant recommendations
Reference: EP communications protocol
5. Subpoena service for a criminal case in Illinois is typically performed by:
- A.Any licensed private detective
- B.The clerk of court in person
- C.Certified mail only
- D.The sheriff, coroner, or any person authorized by the court (correct answer)
Reference: 725 ILCS 5/115-3
6. 'Bump and follow' is a surveillance term meaning:
- A.Intentionally leaving a surveillance location and re-acquiring the subject at a predicted destination (correct answer)
- B.A vehicular accident technique
- C.Bumping into a subject to plant a tracking device
- D.A relay technique using two cyclists
Reference: Surveillance terminology
7. When a private security officer is involved in a use-of-force incident, they should:
- A.Leave the scene immediately
- B.Secure the scene, render aid, notify law enforcement, and complete a detailed incident report (correct answer)
- C.Only speak with their attorney and make no report
- D.Delete any video footage before police arrive
Reference: Post-incident protocol
8. The 'reactionary gap' taught in defensive tactics for security officers refers to:
- A.The time between shifts
- B.The delay between a radio call and a response
- C.The minimum distance maintained to allow time to react to a sudden attack (correct answer)
- D.A gap in surveillance coverage
Reference: Defensive tactics / Tueller Drill
9. Which of the following correctly describes the Illinois Private Detective, Private Alarm, Private Security, Fingerprint Vendor, and Locksmith Act?
- A.It regulates only firearms dealers
- B.It was repealed in 2010
- C.It applies only to government contractors
- D.It provides licensing requirements for private detectives, security contractors, alarm contractors, and locksmiths (correct answer)
Reference: 225 ILCS 447 overview
10. 'Choke point' in route security planning refers to:
- A.A location where movement is funneled and restricted, increasing vulnerability to attack (correct answer)
- B.A medical term for positional asphyxia
- C.A secure checkpoint requiring ID verification
- D.A firearm malfunction drill
Reference: EP route planning
11. In process serving, 'sewer service' is the fraudulent practice of:
- A.Serving process near a sewer to avoid being seen
- B.Filing an affidavit of service claiming service was made when it was not (correct answer)
- C.Serving process through a sewer access point
- D.Discarding unserved process documents
Reference: Due process / fraud in the legal system
12. A security officer detaining a shoplifter may hold them for a reasonable time, which Illinois courts have interpreted to generally not exceed:
- A.10 minutes
- B.4 hours
- C.A reasonable time sufficient to summon police, typically not more than 30–60 minutes (correct answer)
- D.Until the store manager decides to press charges
Reference: 720 ILCS 5/16A-5 / Illinois case law
13. Before beginning any surveillance assignment, a licensed PI should:
- A.File a report with local police
- B.Notify the subject's employer
- C.Obtain a search warrant
- D.Review the client's authorization, confirm the legal basis for the surveillance, and document the scope (correct answer)
Reference: Professional investigative ethics / 225 ILCS 447
14. The 'peeling' technique in executive protection refers to:
- A.One agent breaking away to cover a threat while another evacuates the principal (correct answer)
- B.Removing layers of clothing to conceal body armor
- C.Peeling off from a motorcade at a decoy location
- D.Removing a disguise during a counter-surveillance operation
Reference: EP team tactics
15. A private investigator in Illinois who operates without a valid license is subject to:
- A.A written warning only
- B.Criminal prosecution for unlicensed practice as a Class A misdemeanor or felony, plus civil penalties (correct answer)
- C.License suspension without criminal charges
- D.Only a fine of up to $500
Reference: 225 ILCS 447/35-90
16. In surveillance, a 'fixed observation post' (FOP) is most effective when:
- A.The subject's movements are highly unpredictable
- B.Multiple subjects are being tracked simultaneously
- C.The subject's routine is predictable and centered around a known location (correct answer)
- D.Weather conditions are poor
Reference: Surveillance methodology
17. The purpose of wearing plain clothes during surveillance is primarily to:
- A.Avoid paying for uniforms
- B.Comply with IDFPR regulations
- C.Comply with union requirements
- D.Blend into the environment to avoid detection by the subject (correct answer)
Reference: Surveillance tradecraft
18. Which of the following is a best practice for chain of custody of surveillance evidence?
- A.Label all media with case number, date, time, operator name; store securely; document every transfer (correct answer)
- B.Store all footage on a personal cloud account
- C.Email footage to the client immediately after each session
- D.Overwrite footage after submitting a written report
Reference: Evidence chain of custody standard
19. When a principal is under an active threat, the bodyguard's primary obligation is to:
- A.Engage and neutralize the threat
- B.Get the principal to safety as the first priority (correct answer)
- C.Call 911 before taking any physical action
- D.Evacuate bystanders first
Reference: EP core doctrine — protect, don't fight
20. A two-person surveillance team conducting mobile surveillance at night should consider using:
- A.One vehicle with all lights off
- B.Motorcycles only
- C.Two vehicles with coordinated communication, alternating lead to minimize detection (correct answer)
- D.Identical vehicles to look like a convoy
Reference: Night mobile surveillance best practice
21. Under Illinois law, a private detective conducting a criminal background investigation for an employer must comply with which federal law?
- A.HIPAA
- B.OSHA
- C.The Federal Wiretap Act only
- D.The Fair Credit Reporting Act (FCRA) when the investigation constitutes a 'consumer report' (correct answer)
Reference: 15 U.S.C. § 1681 (FCRA)
22. If a subject confronts a surveillance operative and asks if they are being followed, the operative should:
- A.Disengage safely without confirming or revealing the assignment, and immediately notify the supervisor/client (correct answer)
- B.Immediately confirm they are conducting surveillance
- C.Detain the subject for questioning
- D.Deny everything aggressively and continue surveillance
Reference: Surveillance compromise protocol
23. A private detective in Illinois must renew their license every:
- A.1 year
- B.3 years (correct answer)
- C.3 years
- D.5 years
Reference: 225 ILCS 447 renewal cycle
24. In executive protection, 'cover and evacuation' means:
- A.Covering the principal with a jacket while leaving
- B.Covering a crime scene and evacuating witnesses
- C.Using agents and physical barriers to shield the principal from harm while moving them to safety (correct answer)
- D.Evacuating a building due to fire
Reference: EP response doctrine
25. When serving process on a Sunday or legal holiday in Illinois, the server should be aware that:
- A.Service on Sundays or holidays is always void
- B.Federal courts prohibit all service on holidays
- C.Only the sheriff may serve process on holidays
- D.Service is generally valid on any day unless the court has issued a specific restriction, though some types of service have day restrictions by statute (correct answer)
Reference: 735 ILCS 5/2-202 / Illinois service rules