McAfee CCII Practice Exams
Last updated on Oct 22,2026- Exam Code: CCII
- Exam Name: Certified Cyber Intelligence Investigator (CCII)
- Certification Provider: McAfee
- Latest update: Oct 22,2026
Question #121
Ethical hacking is where a person hacks to find weaknesses in a system and then usually patches them.
- A . True
- B . False
Correct Answer: A
A
Explanation:
Ethical hacking, also known aspenetration testing, is a legal and structured process where cybersecurity professionalssimulate attacksto find and fix security vulnerabilities. Ethical hackers:
Identify weaknessesin networks, applications, and infrastructure.
Help organizations strengthen securityby recommending solutions.
Use the same tools as malicious hackers, but with permission and legal authority.
Ethical hacking iswidely used in cybersecurity auditsto protect businesses, governments, and individuals from cyber threats.
Reference: McAfee Institute CCII Cybersecurity Training, Ethical Hacking – A Hands-on Introduction.
A
Explanation:
Ethical hacking, also known aspenetration testing, is a legal and structured process where cybersecurity professionalssimulate attacksto find and fix security vulnerabilities. Ethical hackers:
Identify weaknessesin networks, applications, and infrastructure.
Help organizations strengthen securityby recommending solutions.
Use the same tools as malicious hackers, but with permission and legal authority.
Ethical hacking iswidely used in cybersecurity auditsto protect businesses, governments, and individuals from cyber threats.
Reference: McAfee Institute CCII Cybersecurity Training, Ethical Hacking – A Hands-on Introduction.
Question #122
Which technique is used for profiling individuals during an investigation?
- A . Social Media Analysis
- B . IP Tracking
- C . Facial Recognition
- D . All of the above
Correct Answer: D
D
Explanation:
Investigatorsuse multiple techniquesto build profiles on suspects:
Social Media AnalysisC Reviewing posts, connections, and activities.
IP TrackingC Identifying locations and internet usage patterns.
Facial RecognitionC Matching images to known identities in databases.
These techniques help incybercrime investigations, fraud detection, and counterterrorism. However, privacy laws govern theirethical and legal use.
Reference: McAfee Institute CCII Cyber Intelligence Guide, OSINT Handbook.
D
Explanation:
Investigatorsuse multiple techniquesto build profiles on suspects:
Social Media AnalysisC Reviewing posts, connections, and activities.
IP TrackingC Identifying locations and internet usage patterns.
Facial RecognitionC Matching images to known identities in databases.
These techniques help incybercrime investigations, fraud detection, and counterterrorism. However, privacy laws govern theirethical and legal use.
Reference: McAfee Institute CCII Cyber Intelligence Guide, OSINT Handbook.
Question #123
The larger the standard deviation between two-like items a seller has sold, the more likely it is to be stolen.
- A . True
- B . False
Correct Answer: A
A
Explanation:
Ahigh standard deviationin item pricing often indicatessuspicious sales behavior, such as stolen goods being sold atunusually low pricesorprice manipulation for fraud. Investigators usestatistical analysisto detect such anomalies.
Reference: McAfee Institute CCII Training, OSINT Handbook.
A
Explanation:
Ahigh standard deviationin item pricing often indicatessuspicious sales behavior, such as stolen goods being sold atunusually low pricesorprice manipulation for fraud. Investigators usestatistical analysisto detect such anomalies.
Reference: McAfee Institute CCII Training, OSINT Handbook.
Question #124
The phrase "law enforcement intelligence," used synonymously with "criminal intelligence," refers to law enforcement’s responsibility to enforce the criminal law.
- A . True
- B . False
Correct Answer: A
A
Explanation:
Law enforcement intelligence refers to analyzing criminal patterns, suspects, and threats to enhance policing strategies. It involves criminal profiling, cyber intelligence, counterterrorism measures, and predictive analysis to prevent crimes before they occur.
Reference: McAfee Institute CCII Training Manual, Cyber Crime Investigator’s Field Guide.
A
Explanation:
Law enforcement intelligence refers to analyzing criminal patterns, suspects, and threats to enhance policing strategies. It involves criminal profiling, cyber intelligence, counterterrorism measures, and predictive analysis to prevent crimes before they occur.
Reference: McAfee Institute CCII Training Manual, Cyber Crime Investigator’s Field Guide.
Question #125
What resources can aid in social network investigations?
- A . Data mining
- B . Profile information
- C . User demographics
- D . Google
- E . Social media monitoring services
Correct Answer: A,B,C,D,E
A,B,C,D,E
Explanation:
Social network investigations require multiple resources to gather intelligence on a subject.
Data mininginvolves extracting useful patterns and connections from large sets of social media data.
Profile informationprovides direct insights into the target’s interests, activities, and affiliations.
User demographicshelp in analyzing behavioral trends and connections.
Googleaids in cross-referencing information found on social networks with other sources.
Social media monitoring servicesautomate the process of collecting and analyzing public data from social networks.These resources are vital for intelligence operations, cybercrime investigations, and threat assessments.
A,B,C,D,E
Explanation:
Social network investigations require multiple resources to gather intelligence on a subject.
Data mininginvolves extracting useful patterns and connections from large sets of social media data.
Profile informationprovides direct insights into the target’s interests, activities, and affiliations.
User demographicshelp in analyzing behavioral trends and connections.
Googleaids in cross-referencing information found on social networks with other sources.
Social media monitoring servicesautomate the process of collecting and analyzing public data from social networks.These resources are vital for intelligence operations, cybercrime investigations, and threat assessments.
Question #126
Preservation of physical and digital evidence is mandatory for a successful investigation.
- A . True
- B . False
Correct Answer: A
A
Explanation:
Forensic investigations rely on the proper collection, preservation, and documentation of both physical and digital evidence to ensure their integrity and admissibility in legal proceedings. Digital evidence, like logs, metadata, and encrypted data, must be properly stored and secured against tampering or loss. Following the chain of custody is crucial to avoid contamination and legal challenges.
A
Explanation:
Forensic investigations rely on the proper collection, preservation, and documentation of both physical and digital evidence to ensure their integrity and admissibility in legal proceedings. Digital evidence, like logs, metadata, and encrypted data, must be properly stored and secured against tampering or loss. Following the chain of custody is crucial to avoid contamination and legal challenges.
Question #127
The phrase "law enforcement intelligence," used synonymously with "criminal intelligence," refers to law enforcement’s responsibility to enforce the criminal law.
- A . True
- B . False
Correct Answer: A
A
Explanation:
Law enforcement intelligence (LEI)is a branch of intelligence focusing on criminal investigations, counterterrorism, and public safety enforcement. It encompasses data collection, covert operations, surveillance, and predictive analytics to enhance law enforcement’s capability to prevent and prosecute crimes.
A
Explanation:
Law enforcement intelligence (LEI)is a branch of intelligence focusing on criminal investigations, counterterrorism, and public safety enforcement. It encompasses data collection, covert operations, surveillance, and predictive analytics to enhance law enforcement’s capability to prevent and prosecute crimes.
Question #128
It is often better to use a screen recording software (e.g., Camtasia) instead of taking screenshots.
- A . True
- B . False
Correct Answer: A
A
Explanation:
Screen recording software providescontinuous,timestamped, andunalteredrecordings of user interactions, ensuring the evidence retains context and authenticity. Screenshots can be edited or manipulated, reducing credibility in legal proceedings.
Reference: McAfee Institute Cyber Intelligence Training
OSINT Capture and Evidence Management Guides
Federal Rules of Digital Evidence
A
Explanation:
Screen recording software providescontinuous,timestamped, andunalteredrecordings of user interactions, ensuring the evidence retains context and authenticity. Screenshots can be edited or manipulated, reducing credibility in legal proceedings.
Reference: McAfee Institute Cyber Intelligence Training
OSINT Capture and Evidence Management Guides
Federal Rules of Digital Evidence
Question #129
What is shill bidding?
- A . Buying an item online
- B . Going out to eat with a friend
- C . Increasing the bid on an item with another account so that you can drive the price up
Correct Answer: C
C
Explanation:
Shill bidding is an illegal auction practice where sellers use fake accounts or associatestoartificially increase the price of an item. This misleads real buyers into overpaying. It is a common type of fraud in online auctions like eBay and is a violation of platform policies and fraud laws.
Reference: McAfee Institute CCII Auction Fraud Training, Cybercrime Encyclopedia.
C
Explanation:
Shill bidding is an illegal auction practice where sellers use fake accounts or associatestoartificially increase the price of an item. This misleads real buyers into overpaying. It is a common type of fraud in online auctions like eBay and is a violation of platform policies and fraud laws.
Reference: McAfee Institute CCII Auction Fraud Training, Cybercrime Encyclopedia.
Question #130
You can access the profile of a subject if they are represented by legal counsel.
- A . True
- B . False
Correct Answer: B
B
Explanation:
Accessing a subject’s profile when they are represented by legal counselmay violate legal and ethical boundaries. Investigators must ensure compliance withlegal regulationsto avoid infringement on privacy rights. Unauthorized access could result inlegal liabilitiesunder variouscybercrime laws and ethical guidelinesfor digital investigations.
Reference: McAfee Institute Cybercrime Investigator’s Field Guide
OSINT Handbook
Federal Digital Privacy Laws
B
Explanation:
Accessing a subject’s profile when they are represented by legal counselmay violate legal and ethical boundaries. Investigators must ensure compliance withlegal regulationsto avoid infringement on privacy rights. Unauthorized access could result inlegal liabilitiesunder variouscybercrime laws and ethical guidelinesfor digital investigations.
Reference: McAfee Institute Cybercrime Investigator’s Field Guide
OSINT Handbook
Federal Digital Privacy Laws