Certified Expert in Cyber Investigations Exam Prep
Free practice questions

Free CECI Practice Questions

10 exam-style questions with answers and explanations, straight from our 1,030-question bank. Tap an answer to check yourself. When you're ready, take the scored version in the free practice test.

Start the free practice test → ★★★★★4.9/5 from 2,400+ candidates · No signup

These 10 free CECI questions are organized by exam domain, so you can see how each part of the Certified Expert in Cyber Investigations blueprint is tested. Reveal the answer and explanation under each question.

Domain 1: Intelligence foundations

Question 1

Intelligence collection produces raw information. Which activity turns it into intelligence?

Show answer & explanation

Correct answer: B - Analyze reliability and patterns to create actionable conclusions

Domain 2: Open-source intelligence and online research

Question 2

Two OSINT sources conflict. What should an investigator do next?

Show answer & explanation

Correct answer: C - Evaluate reliability and seek corroboration

Domain 3: Social media intelligence

Question 3

Before attributing a social media account to a person, the investigator should:

Show answer & explanation

Correct answer: A - Document indicators and corroborate identity

Domain 4: Cybercrime investigations

Question 4

What best supports cyber attribution?

Show answer & explanation

Correct answer: D - Combined technical, behavioral, and contextual evidence

Domain 5: Counterintelligence

Question 5

Possible insider activity is detected. The best initial objective is to:

Show answer & explanation

Correct answer: B - Identify insider-threat indicators while protecting information

Domain 6: Fraud investigations

Question 6

What strengthens a fraud case?

Show answer & explanation

Correct answer: C - Correlated transactions, identities, and digital evidence

Domain 7: Organized retail crime

Question 7

Repeated retail theft patterns across locations should be analyzed by:

Show answer & explanation

Correct answer: A - Linking people, places, transactions, and events

Domain 8: Electronic discovery

Question 8

The primary purpose of preserving electronic information is to:

Show answer & explanation

Correct answer: B - Prevent alteration or loss of relevant information

Domain 9: Computer forensics

Question 9

Which practice supports forensic defensibility?

Show answer & explanation

Correct answer: C - Document collection, custody, storage, and examination

Question 10

A forensic report lacks handling history. The main weakness is:

Show answer & explanation

Correct answer: A - Insufficient evidence-handling documentation

The rest of the CECI blueprint

The CECI exam also covers these domains. Drill them in the full free practice test:

That's 10 of 1,030

The full bank has 1,020 more CECI questions with explanations.

Continue in the free practice test →

View plans