Free practice exam
Master Intelligence & Counter-Fraud Analyst (MICA) practice questions
Practise the integrated master-level skills: intelligence foundations, fraud and crypto crime, OSINT attribution, tradecraft, and legal and ethical limits.
These 15 questions are separate from the real MICA capstone, so you can see every answer here. Pick an option to check yourself, and use the chapter link to revise.
Score: 0 / 0 answered · 15 questions
1. What separates 'information' from 'intelligence'?
Answer: B. Intelligence is information that has been evaluated and analysed to answer a decision-maker's question
Intelligence adds evaluation, context and judgement aimed at a need.
Study this in chapter 12. A source has been reliable before but this claim cannot be checked. How should it be graded?
Answer: B. Source reliability and information credibility are graded separately
Admiralty-style grading rates the source and the information independently.
Study this in chapter 13. What is a 'money mule'?
Answer: B. A person who moves illicit funds through their own accounts, knowingly or not
Mules add distance between the crime and the cash-out; many are recruited through fake jobs.
Study this in chapter 24. Which is a common red flag of trade-based or layered laundering?
Answer: B. Rapid movement through many accounts with no clear business purpose
Layering hides the source by moving funds quickly through many hops.
Study this in chapter 25. Why combine on-chain tracing with OSINT?
Answer: B. Blockchain data shows flows; OSINT can connect addresses to accounts, posts or sites
Each discipline fills the other's blind spots.
Study this in chapter 36. Two accounts use identical unusual phrases and the same wallet. What is the strongest correct conclusion?
Answer: B. There is a meaningful link that should be stated with a confidence level and tested further
Linkage is not identity; state confidence and look for alternative explanations.
Study this in chapter 47. In an integrated operation, why agree a shared case timeline?
Answer: B. So intelligence from different teams lines up and gaps or contradictions become visible
A single timeline is the backbone of multi-source analysis.
Study this in chapter 58. Reviewing a closed case, what is the main purpose of a 'lessons learned' step?
Answer: B. Identifying what worked and what to change in future investigations
Reviews improve process; they are not about blame.
Study this in chapter 69. What is counterintelligence in a fraud-investigation context?
Answer: B. Protecting your team, sources and methods from being discovered or manipulated by adversaries
Adversaries watch investigators too; tradecraft hygiene protects the work.
Study this in chapter 710. An unknown contact offers 'inside information' on a scam group very eagerly. What is the prudent approach?
Answer: B. Treat the offer as possibly deceptive, verify independently and limit what you reveal
Unsolicited sources can be plants or disinformation.
Study this in chapter 711. Why is data minimisation important when handling victim information?
Answer: B. Collect and keep only what you need, reducing harm if data leaks and supporting privacy law
Privacy laws such as the GDPR require purpose limitation and minimisation.
Study this in chapter 812. An investigator wants to log into a suspect's account using a leaked password. What applies?
Answer: B. Accessing an account without authorisation is generally illegal and outside OSINT
Unauthorised access breaks computer misuse laws regardless of the target.
Study this in chapter 813. When should findings be passed to law enforcement?
Answer: B. Through proper reporting channels when crimes or risk to people are identified, with clear evidence
Liaison through proper channels lets the people with legal powers act.
Study this in chapter 814. What does 'TTP' stand for in threat analysis?
Answer: B. Tactics, techniques and procedures
TTPs describe how an adversary operates, which helps spot the same group again.
Study this in chapter 915. What is the danger of publicly naming a suspect too early?
Answer: B. Wrongful accusation, legal risk, and warning the real offender
Premature attribution can harm innocent people and damage cases.
Study this in chapter 4
Ready for the real MICA capstone?
The final uses different questions drawn from the same chapters. Track your attempts and study material in your course portal.
Authoritative sources
Independent primary sources used to check and corroborate the guidance on this page.
NIST National Initiative for Cybersecurity Education (NICE)US national framework for cybersecurity work roles and competencies.
Financial Action Task Force (FATF)Global AML/CFT standards referenced by financial-crime curricula.
FBI Internet Crime Complaint Center — Annual ReportsPrimary loss and typology data used in fraud-investigation training.
US Federal Trade Commission — Consumer Sentinel Data BookOfficial complaint statistics for teaching fraud trend analysis.