CFE-Investigation Free Practice Test

Which of the following is the most appropriate measure when seeking to avoid alerting suspected perpetrators who are under investigation?

1. A. Investigate during nonbusiness hours.
2. B. Disclose the investigation to all employees.
3. C. Terminate the suspected employee
4. D. Delay taking any action

Correct Answer: A

Which of the following is the MOST ACCURATE statement about imaging suspect computers hard drives?

1. A. Imaging allows for the analysis of data from a suspect computer without altering or damaging the original data in any way
2. B. Imaging creates pictures of the suspect computer system and its wires and cables
3. C. Imaging prohibits access to the suspect computer s hard drive by individuals not professionally trained in forensic analysis
4. D. Imaging enables the retrieval of data from the suspect computer directly via its operating system.

Correct Answer: A

Which of the following is NOT a step a fraud examiner must take before seizing evidence in a digital forensic investigation?

1. A. Obtain and become familiar with any applicable legal orders.
2. B. Determine whether there ate privacy issues related to the items(s) to be searched.
3. C. Ensure that any software used in a forensic capacity is legitimate.
4. D. Assemble an investigation team comprised only of outside digital forensic experts.

Correct Answer: B

Eric, a Certified Fraud Examiner (CFE) is conducing an admission-seeking interview with Sean, a fraud suspect Sean is seated across the table from Eric. The door is closed but not locked and there are no windows or wall hangings in the room According to admission seeking interview best practices, what change should Eric make to the interview environment to increase that chances of the interview's success?

1. A. Remove the table from the room to prevent physical and psychological barriers
2. B. Lock the door to ensure the interview is not interrupted
3. C. Move the interview to a room with a window so that Sean feels more comfortable.
4. D. Open the door so that Sean feels tree to leave at any time

Correct Answer: D

Which of the following statements about the process of obtaining a verbal confession is TRUE?

1. A. If the subject lies about an aspect of the offense In the process of confessing it is best to coned the records immediately before proceed.
2. B. The only acceptable approaches to obtaining a verbal confession are chronologically or by transaction
3. C. The transition from the accusation to the confession should occur when the accused supplies the first detailed information about the offense.
4. D. Fraudsters tend to overestimate the amount of kinds Involved in the offense to relieve themselves of the guff, of their dishonest actions

Correct Answer: C