10 exam-style questions with answers and explanations, straight from our 1,030-question bank. Tap an answer to check yourself. When you're ready, take the scored version in the free practice test.
These 10 free CASIP questions are organized by exam domain, so you can see how each part of the Certified All-Source Intelligence Professional blueprint is tested. Reveal the answer and explanation under each question.
A source already rated A for reliability in the relevant subject area submits a new report. The report is too incomplete to assess its plausibility, and no corroborating or contradictory information is available. The source's established reliability rating remains unchanged. Under the Admiralty/NID letter-number system described by FIRST, which rating fits this report?
Correct answer: A - A6 - reliable source; the information cannot yet be judged.
A logistics director must decide within 20 minutes whether to reroute tomorrow's deliveries. The port authority has confirmed that the intended terminal will remain closed throughout tomorrow. Reports disagree about the cause and the reopening date after tomorrow. The analyst's draft clearly distinguishes the confirmed closure from those unresolved details. The director is authorized to receive it. What is the appropriate release decision?
Correct answer: C - Release the assessment now with its uncertainty statements intact; issue updates as needed.
Imagery confirms that a manufacturer has added storage tanks. Analysis of lawfully collected air samples is consistent with a process used both to make a new product and to replace older production capacity. The customer needs to understand management's reason for the investment, not simply whether the equipment exists. Which collection task most directly addresses that gap?
Correct answer: C - Arrange an authorized interview with a participant in the investment decision.
A VirtualBox research VM has a snapshot of its normal virtual disk. After the snapshot, an analyst saves notes on that disk, edits a file in a shared folder physically stored on the host, and submits a query to a remote service that records account activity. The analyst then restores the snapshot. There are no other rollback or synchronization mechanisms. What should the analyst expect?
Correct answer: B - The notes are undone; the shared-folder edit and remote activity record remain.
A validation collection contains 120 relevant public records. A focused query retrieves 150 records, including 102 relevant ones; a broader query retrieves 300, including 114 relevant ones. For this assignment, the analyst must recover at least 80% of the relevant records and can manually review no more than 200 results. Which recommendation satisfies both requirements?
Correct answer: C - Use the focused query: 85% recall and 68% precision meet the recovery and workload limits.
An analyst computes centrality measures on the same observed public repost network. Heron has degree 40 and normalized betweenness 0.04; Kite has degree 9 and betweenness 0.61; Lark has degree 27 and betweenness 0.09; Wren has degree 16 and betweenness 0.18. The next review concerns accounts lying on paths between otherwise separated clusters, rather than accounts with the most direct connections. Which account should be prioritized on that basis?
Correct answer: B - Kite, because it has the greatest betweenness in this network.
An analyst has an authenticated Android APK from a vendor and a newer APK advertised as its update on another website. A matching display name and icon are not enough to establish continuity. No signing-key rotation is claimed. Which finding gives the strongest technical support that the newer file continues the authenticated app's signing identity?
Correct answer: A - Its application ID matches, and its verified signature uses the same app-signing certificate.
While monitoring public posts from a U.S. office, an analyst finds a message threatening an armed attack at a named, occupied U.S. venue in ten minutes. The account holder is unknown. The analyst has captured the message, URL, and timestamp without delaying action; attribution research would take longer than the remaining interval. What comes first?
Correct answer: D - Call 911 and notify venue security, making clear that the threat's attribution is unverified.
A river has overtopped its banks overnight. An analyst must map standing water across open farmland before sunrise, but persistent cloud blocks the surface. All four proposed satellite acquisitions can cover the area before the deadline at adequate spatial resolution. Which acquisition meets the illumination and cloud constraints?
Correct answer: B - C-band synthetic aperture radar imagery of microwave backscatter.
A willing witness is about to give their first account of activity at a loading bay. Another witness has mentioned a red van, but the two witnesses have not discussed the incident. After establishing rapport and explaining the interview, the interviewer wants an account that has not been shaped by the earlier report. Select the strongest opening invitation.
Correct answer: D - 'Tell me everything you remember about what happened at the loading bay.'
The CASIP exam also covers these domains. Drill them in the full free practice test:
The full bank has 1,020 more CASIP questions with explanations.
Continue in the free practice test →
View plans