CSI Study Guide 2026
Everything you need to pass the CSI exam in one place: the exam format, every topic to study, real practice questions with explanations, flashcards, and full-length practice tests. Free, no sign-up needed.
📋 CSI Exam Format at a Glance
📚 CSI Topics to Study (69)
✍️ Sample CSI Questions & Answers
1. What does the term 'attack surface' refer to in information security?
The attack surface encompasses all the different points where an attacker could try to enter, extract data from, or disrupt a system or network.
2. What is a 'cognitive load' indicator during an interview, and why is it significant?
Increased cognitive load — shown by pauses, slower speech, or requests for repetition — can indicate a subject is constructing rather than recalling a story.
3. A CSI investigator preparing a report for litigation should write in:
Third-person writing in investigative reports maintains professional neutrality and objectivity required for legal proceedings.
4. A forensic image of a suspect hard drive differs in hash value from the original drive after acquisition. What does this MOST likely indicate?
A hash mismatch means the image does not exactly match the source, indicating possible evidence tampering or an acquisition error.
5. When a security investigator must correct an error in a written report, the proper procedure is to:
Drawing a single line, initialing, and correcting preserves the original entry while showing the authorized change.
6. What is 'statement analysis' used for in a security interview?
Statement analysis examines word choice, structure, and omissions in a subject's account to identify potential deception.